CVE-2009-1379: Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1...

Security readout for executives and security teams

This is an old OpenSSL DTLS memory-safety flaw. The public record describes a remote denial-of-service condition against OpenSSL 1.0.0 Beta 2, with unspecified other impact possible. Business urgency depends on whether any legacy, embedded, or vendor-managed systems still contain the affected OpenSSL code path. Most exposure is likely in legacy systems, old distributions, appliances, or vendor products that shipped the affected OpenSSL version or related backports. The bundle does not provide reliable CPEs, so exposure must be confirmed through package inventory and the cited vendor advisories. Treat this as a legacy risk cleanup item unless affected DTLS-facing assets are confirmed. It is not KEV-listed and no active exploitation is cited, but unsupported OpenSSL in infrastructure or appliances can create avoidable outage risk. Mitigation focus: Check vendor advisories for fixed OpenSSL packages on affected platforms.; Upgrade or replace OpenSSL 1.0.0 Beta 2 where present.; Prioritize systems using DTLS with untrusted remote peers..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.