It was discovered that OpenSSL did not limit the number of DTLS records it would buffer when they arrived with a future epoch. A remote attacker could cause a denial of service via memory resource consumption by sending a large number of crafted requests.
(CVE-2009-1377)

It was discovered that OpenSSL did not properly free memory when processing DTLS fragments. A remote attacker could cause a denial of service via memory resource consumption by sending a large number of crafted requests. (CVE-2009-1378)

It was discovered that OpenSSL did not properly handle certain server certificates when processing DTLS packets. A remote DTLS server could cause a denial of service by sending a message containing a specially crafted server certificate. (CVE-2009-1379)

It was discovered that OpenSSL did not properly handle a DTLS ChangeCipherSpec packet when it occured before ClientHello. A remote attacker could cause a denial of service by sending a specially crafted request. (CVE-2009-1386)

It was discovered that OpenSSL did not properly handle out of sequence DTLS handshake messages. A remote attacker could cause a denial of service by sending a specially crafted request. (CVE-2009-1387).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1335 advisory.

  - openssl: mime_hdr_cmp NULL dereference crash (CVE-2006-7250)

  - openssl: ASN1 printing crash (CVE-2009-0590)

  - OpenSSL: DTLS epoch record buffer memory DoS (CVE-2009-1377)

  - OpenSSL: DTLS fragment handling memory DoS (CVE-2009-1378)

  - OpenSSL: DTLS pointer use-after-free flaw (DoS) (CVE-2009-1379)

  - openssl: DTLS NULL deref crash on early ChangeCipherSpec request (CVE-2009-1386)

  - openssl: DTLS out-of-sequence message handling NULL deref DoS (CVE-2009-1387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of OpenSSL installed on the remote host is prior to 0.9.8i. It is, therefore, affected by a vulnerability as referenced in the 0.9.8i advisory.

  - ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer     dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
    (CVE-2009-1386)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

OpenSSL DTLS remote DoS in ChangeCipherSpec (CVE-2009-1386) and in out-of-sequence message handling (CVE-2009-1387) have been fixed.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
39534	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : openssl vulnerabilities (USN-792-1)	Nessus	Ubuntu Local Security Checks	2009/6/26	2021/1/19	medium
63892	RHEL 5 : openssl (RHSA-2009:1335)	Nessus	Red Hat Local Security Checks	2013/1/24	2024/4/21	high
17761	OpenSSL 0.9.8 < 0.9.8i Vulnerability	Nessus	Web Servers	2012/1/4	2024/10/23	high
41573	SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6296)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	medium

检测

插件搜索

medium

high

high

medium