CVE-2009-1386

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8i

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash. This can be achieved via a DTLS ChangeCipherSpec packet that occurs before the ClientHello packet.

Recommendations For versions prior to 0.9.8i, update to version 0.9.8i or later to resolve the issue. As a temporary workaround, consider restricting DTLS connections to prevent the exploitation of this issue until a patch is applied.