CVE:CVE-2009-1378
CNNVD:CNNVD-200905-242
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。
OpenSSL 0.9.8k及之前版本和0.9.8版本中的ssl/d1_both.c文件的‘dtls1_process_out_of_seq_message’函数存在资源管理错误漏洞。远程攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade openssl openssl to a higher version than 0.9.8,0.9.8,0.9.8:beta1,0.9.8:beta2,0.9.8:beta3,0.9.8:beta4,0.9.8:beta5,0.9.8:beta6,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k,and avoid the version (,0.9.8),0.9.8,0.9.8:beta1,0.9.8:beta2,0.9.8:beta3,0.9.8:beta4,0.9.8:beta5,0.9.8:beta6,0.9.8a,0.9.8b,0.9.8c,0.9.8d,0.9.8e,0.9.8f,0.9.8g,0.9.8h,0.9.8i,0.9.8j,0.9.8k; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,and avoid the version 6.06,8.04,8.10,9.04