CVE-2009-1377: The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote...

Security readout for executives and security teams

This is a remote denial-of-service issue in old OpenSSL DTLS handling. An attacker could make an affected service consume memory until it becomes unstable or unavailable. It does not indicate data theft or code execution in the provided sources. Exposure is most likely on legacy systems running OpenSSL 0.9.8-era libraries with DTLS-enabled services. Downstream advisories from Linux and appliance vendors indicate packaged products were affected at the time. Treat this as a legacy exposure cleanup item unless critical DTLS services still run affected OpenSSL. Internet-facing affected services should be prioritized because the impact is service outage. Mitigation focus: Identify systems using OpenSSL 0.9.8k or earlier 0.9.8 versions.; Apply relevant vendor OpenSSL security updates for affected operating systems or products.; If patching is delayed, reduce or remove exposed DTLS service access..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.