Security Advisory

CVE-2009-1386

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-06-04 16:00:00
Last updated 2024-08-07 05:13:25
Assigner redhat
State PUBLISHED

Description

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.