Skip to main content

NULL Pointer Dereference

CVE-2009-1387

Medium
5/10

Summary

The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 0.9.8 before 0.9.8m allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."

  • LOW
  • NETWORK
  • NONE
  • NONE
  • NONE
  • PARTIAL

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published