CVE-2010-0740

Published: Mar 26, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

Affected (8)

Products: Openssl: Openssl

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.8f
Openssl Openssl	Version 0.9.8g
Openssl Openssl	Version 0.9.8h
Openssl Openssl	Version 0.9.8i
Openssl Openssl	Version 0.9.8j
Openssl Openssl	Version 0.9.8k
Openssl Openssl	Version 0.9.8l
Openssl Openssl	Version 0.9.8m

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (48)

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=127128920008563&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=127557640302499&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/39932

Source: secalert@redhat.com

http://secunia.com/advisories/42724

Source: secalert@redhat.com

http://secunia.com/advisories/42733

Source: secalert@redhat.com

http://secunia.com/advisories/43311

Source: secalert@redhat.com

http://support.apple.com/kb/HT4723

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2010:076

Source: secalert@redhat.com

http://www.openssl.org/news/secadv_20100324.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: secalert@redhat.com

http://www.securitytracker.com/id?1023748

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: secalert@redhat.com

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0710

Source: secalert@redhat.com

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/0839

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0933

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/1216

Source: secalert@redhat.com

https://kb.bluecoat.com/index?page=content&id=SA50

Source: secalert@redhat.com

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html

Source: secalert@redhat.com

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731

Source: secalert@redhat.com

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=127128920008563&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=127557640302499&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39932

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42724

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42733

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43311

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT4723

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2010:076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openssl.org/news/secadv_20100324.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1023748

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0710

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2010/0839

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0933

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1216

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.bluecoat.com/index?page=content&id=SA50

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11731

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.