# CVEs published 2009-05-19

5 CVEs were published on May 19, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-1252](https://cve.now/CVE-2009-1252.md): Stack-based buffer overflow in the crypto\_recv function in ntp\_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSS (no CVSS)
- [CVE-2009-1377](https://cve.now/CVE-2009-1377.md): The dtls1\_buffer\_record function in ssl/d1\_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2009-1378](https://cve.now/CVE-2009-1378.md): Multiple memory leaks in the dtls1\_process\_out\_of\_seq\_message function in ssl/d1\_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow r (no CVSS)
- [CVE-2009-1379](https://cve.now/CVE-2009-1379.md): Use-after-free vulnerability in the dtls1\_retrieve\_buffered\_fragment function in ssl/d1\_both.c in OpenSSL 1.0.0 Beta 2 allows remote attacke (no CVSS)
- [CVE-2009-1418](https://cve.now/CVE-2009-1418.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-05-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.