VYPR
Unrated severityNVD Advisory· Published Jun 4, 2009· Updated Apr 23, 2026

CVE-2009-1386

CVE-2009-1386

Description

ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.

Affected products

8
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
    Range: >0.9.8,<0.9.8i
  • Red Hat/OpenSSL3 versions
    cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:redhat:openssl:0.9.6-15:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openssl:0.9.6b-3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:openssl:0.9.7a-2:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

21

News mentions

0

No linked articles in our index yet.