CVE-2009-1378
Openssl < 0.9.8m - Memory Leak
Title source: ruleDescription
Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Jon Oberheide · cdosmultiple
https://www.exploit-db.com/exploits/8720
References (37)
... and 17 more
Scores
EPSS
0.1325
EPSS Percentile
94.2%
Details
CWE
CWE-401
Status
published
Products (5)
canonical/ubuntu_linux
6.06
canonical/ubuntu_linux
8.04
canonical/ubuntu_linux
8.10
canonical/ubuntu_linux
9.04
openssl/openssl
0.9.8 - 0.9.8m
Published
May 19, 2009
Tracked Since
Feb 18, 2026