ID:3736 - Exploit for Use-after-free in OpenSSL - CVE-2009-1379

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate. A remote attackers can cause a denial of service (openssl s_client crash) and possibly have unspecified other impact.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Remediation