Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23966
HistoryApr 10, 2020 - 12:42 a.m.

Denial Of Service (DoS)

2020-04-1000:42:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

OpenSSL is vulnerable to denial of service (DoS). Multiple denial of service flaws were discovered in OpenSSLโ€™s DTLS implementation. A remote attacker could use these flaws to cause a DTLS server to use excessive amounts of memory, or crash on an invalid memory access or NULL pointer dereference.

References

Related

nessus 24
cve 1
f5 2
ubuntucve 1
openssl 1
prion 1
seebug 1
debiancve 1
openvas 32
ubuntu 1
osv 1
securityvulns 4
debian 1
gentoo 1
oraclelinux 1
altlinux 4
centos 1
redhat 1
vmware 4
lenovo 2
nessus
nessus
F5 Networks BIG-IP : OpenSSL DTLS Buffer vulnerability (SOL15348)
2014-10-10 00:00:00
SuSE 11 Security Update : OpenSSL (SAT Patch Number 990)
2009-09-24 00:00:00
OpenSSL 1.0.0 < 1.0.0-beta2 DoS
2012-01-04 00:00:00
cve
cve
CVE-2009-1387
2009-06-04 16:30:00
f5
f5
K15348 : OpenSSL DTLS Buffer vulnerability CVE-2009-1387
2015-09-10 00:00:00
SOL15348 - OpenSSL DTLS Buffer vulnerability CVE-2009-1387
2014-06-19 00:00:00
ubuntucve
ubuntucve
CVE-2009-1387
2009-06-04 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2009-1387
2009-02-05 00:00:00
prion
prion
Null pointer dereference
2009-06-04 16:30:00
seebug
seebug
OpenSSL dtls1_retrieve_buffered_fragment()ๅ‡ฝๆ•ฐๆกๆ‰‹ๆถˆๆฏๆ‹’็ปๆœๅŠกๆผๆดž
2009-06-22 00:00:00
debiancve
debiancve
CVE-2009-1387
2009-06-04 16:30:00
openvas
openvas
SLES11: Security update for OpenSSL
2009-10-11 00:00:00
SLES10: Security update for OpenSSL
2009-10-13 00:00:00
SLES10: Security update for OpenSSL
2009-10-13 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2009-06-25 00:00:00
osv
osv
openssl - cryptographic weakness
2009-09-15 00:00:00
securityvulns
securityvulns
[USN-792-1] OpenSSL vulnerabilities
2009-06-25 00:00:00
Multiple OpenSSL DoS conditions
2009-06-25 00:00:00
[security bulletin] HPSBMA02492 SSRT100079 rev.1 - HP System Management Homepage &#40;SMH&#41; for Linux and Windows, Remote Cross Site Scripting &#40;XSS&#41;, Denial of Service &#40;DoS&#41;, Execution of Arbitrary Code, Unauthorized Access
2010-04-26 00:00:00
debian
debian
[SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures
2009-09-15 21:37:22
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2009-12-01 00:00:00
oraclelinux
oraclelinux
openssl security, bug fix, and enhancement update
2009-09-08 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8m-alt1
2010-02-26 00:00:00
centos
centos
openssl security update
2009-09-15 18:42:01
redhat
redhat
(RHSA-2009:1335) Moderate: openssl security, bug fix, and enhancement update
2009-09-02 09:47:12
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESXi utilities and ESX Service Console third party updates
2010-05-27 00:00:00
lenovo
lenovo
Intelยฎ PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
Intelยฎ PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:23966
nessus24cve1f52ubuntucve1openssl1prion1seebug1debiancve1openvas32ubuntu1osv1securityvulns4debian1gentoo1oraclelinux1altlinux4centos1redhat1vmware4lenovo2