Detections
Analytics
FreeBSD : openssl -- denial of service in DTLS implementation (82b55df8-4d5a-11de-8811-0030843d3802)
medium Nessus Plugin ID 38966
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Secunia reports :Some vulnerabilities have been reported in OpenSSL, which can be exploited by malicious people to cause a DoS.
The library does not limit the number of buffered DTLS records with a future epoch. This can be exploited to exhaust all available memory via specially crafted DTLS packets.
An error when processing DTLS messages can be exploited to exhaust all available memory by sending a large number of out of sequence handshake messages.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 38966
File Name: freebsd_pkg_82b55df84d5a11de88110030843d3802.nasl
Version: 1.16
Type: local
Family: FreeBSD Local Security Checks
Published: 6/1/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:linux-f10-openssl, p-cpe:/a:freebsd:freebsd:openssl, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 5/30/2009
Vulnerability Publication Date: 5/18/2009
Reference Information
CVE: CVE-2009-1377, CVE-2009-1378