Description
Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.8k-1 | — |
| Debian 13 | openssl | 0.9.8k-1 | — |
| Debian 12 | openssl | 0.9.8k-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | openssl +2 | 0.9.8e-12.el5 | RHSA-2009:1335 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Advisories 2
- RHSA-2009:1335 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- http://rt.openssl.org/Ticket/Display.html?id=1931&user=guest&pass=guest
- 42724 third-party-advisory
- oval:org.mitre.oval:def:7229 vdb-entry signature
- SSA:2010-060-02 vendor-advisory
- 38794 third-party-advisory
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- 8720 exploit
- ADV-2009-1377 vdb-entry
- oval:org.mitre.oval:def:11309 vdb-entry signature
- 35729 third-party-advisory
- GLSA-200912-01 vendor-advisory
- RHSA-2009:1335 vendor-advisory
- http://cvs.openssl.org/chngview?cn=18188
- HPSBMA02492 vendor-advisory
- 38761 third-party-advisory
- 37003 third-party-advisory
- [openssl-dev] 20090518 Re: [openssl.org #1931] [PATCH] DTLS fragment handling memory leak mailing-list
- 36533 third-party-advisory
- 1022241 vdb-entry
- USN-792-1 vendor-advisory
- SUSE-SR:2009:011 vendor-advisory
- http://voodoo-circle.sourceforge.net/sa/sa-20091012-01.html
- [oss-security] 20090518 Two OpenSSL DTLS remote DoS mailing-list
- https://launchpad.net/bugs/cve/2009-1378
- 35001 vdb-entry
- 38834 third-party-advisory
- MDVSA-2009:120 vendor-advisory
- 35461 third-party-advisory
- 35128 third-party-advisory
- 35571 third-party-advisory
- 35416 third-party-advisory
- http://sourceforge.net/mailarchive/message.php?msg_name=4AD43807.7080105%40users.sourceforge.net
- https://kb.bluecoat.com/index?page=content&id=SA50
- [openssl-dev] 20090516 [openssl.org #1931] [PATCH] DTLS fragment handling memory leak mailing-list
- 42733 third-party-advisory
- ADV-2010-0528 vdb-entry