Rapid7 Vulnerability & Exploit Database

OpenSSL DTLS Fragment Buffer Overflow DoS

Back to Search

OpenSSL DTLS Fragment Buffer Overflow DoS

Disclosed
06/05/2014
Created
05/30/2018

Description

This module performs a Denial of Service Attack against Datagram TLS in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h. This occurs when a DTLS ClientHello message has multiple fragments and the fragment lengths of later fragments are larger than that of the first, a buffer overflow occurs, causing a DoS.

Author(s)

  • Juri Aedla <asd@ut.ee>
  • Jon Hart <jon_hart@rapid7.com>

Development

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use auxiliary/dos/ssl/dtls_fragment_overflow
msf auxiliary(dtls_fragment_overflow) > show actions
    ...actions...
msf auxiliary(dtls_fragment_overflow) > set ACTION < action-name >
msf auxiliary(dtls_fragment_overflow) > show options
    ...show and set options...
msf auxiliary(dtls_fragment_overflow) > run

Metasploit

Penetration testing software for offensive security teams.
Key Features
Free Metasploit Pro Trial View All Features

Time is precious, so I don’t want to do something manually that I can automate. Leveraging the Metasploit Framework when automating any task keeps us from having to re-create the wheel as we can use the existing libraries and focus our efforts where it matters.

– Jim O’Gorman | President, Offensive Security

;