Vulnerability in OpenSSL CVE-2009-1377

Fix a denial of service flaw in the DTLS implementation. Records are buffered if they arrive with a future epoch to be processed after finishing the corresponding handshake. There is currently no limitation to this buffer allowing an attacker to perform a DOS attack to a DTLS server by sending...

Vulnerability in OpenSSL CVE-2009-1378

Fix a denial of service flaw in the DTLS implementation. In dtls1processoutofseqmessage the check if the current message is already buffered was missing. For every new message was memory allocated, allowing an attacker to perform an denial of service attack against a DTLS server by sending out of...

Vulnerability in OpenSSL CVE-2009-1379

Use-after-free vulnerability in the dtls1retrievebufferedfragment function could cause a client accessing a malicious DTLS server to crash. Found by Daniel Mentz, Robin Seggelmann...