← Database

CVE-2009-1386

MEDIUM CVSS: 5.0 Published: 2009-06-04 Modified: 2026-06-16

Description

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

Affected Platforms

Redhat OpensslCanonical Ubuntu LinuxOpenssl Openssl

Weakness Type

CWE-476

References