VYPR
Unrated severityNVD Advisory· Published Jun 4, 2009· Updated Jun 16, 2026

CVE-2009-1386

CVE-2009-1386

Description

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*range: >0.9.8,<0.9.8i
    • (no CPE)range: <0.9.8i
  • Red Hat/OpenSSL3 versions
    cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

21

News mentions

0

No linked articles in our index yet.