Debian/openssl: unknown
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello
Action: Upgrade openssl to 0.9.8k-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.8k-1 | - |
Fixed versions
| 0.9.8k-1 |
Sources
- osv: DEBIAN-CVE-2009-1386#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2009-1386
published · modified · JSON