Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-devel | Dec 1, 2016 | May 19, 2009 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | May 19, 2009 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | May 19, 2009 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | May 19, 2009 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 16, 2010 | May 19, 2009 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-devel | May 13, 2016 | May 19, 2009 |
| Suse | — | Upgrade libopenssl1_0_0-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade libopenssl-1_0_0-develUpgrade libopenssl0_9_8Upgrade libopenssl1_0_0Upgrade libopenssl-1_1-develUpgrade libopenssl-develUpgrade libopenssl1_1-32bitUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-docUpgrade libopenssl0_9_8-hmacUpgrade libopenssl0_9_8-32bitUpgrade libopenssl1_0_0-hmacUpgrade libopenssl-fips-providerUpgrade openssl-1_0_0-docUpgrade libopenssl1-develUpgrade openssl1Upgrade openssl-1_0_0Upgrade libopenssl0_9_8-x86Upgrade libopenssl1_1-hmac-32bitUpgrade libopenssl1_1-hmacUpgrade openssl-1_1Upgrade libopenssl0_9_8-hmac-32bitUpgrade openssl1-docUpgrade libopenssl1_1Upgrade openssl | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libssl0.9.8 | Nov 8, 2024 | May 19, 2009 |
| Vmsa 2010 0009 1 Service Console Package Openssl | — | Upgrade VMware ESX 4.0 to build number 256968 | Sep 2, 2010 | May 19, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub