CVE-2010-3864

Published: Nov 17, 2010Modified: Apr 29, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.

Affected (12)

Products: Openssl: Openssl

Openssl

1 product

Openssl

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Openssl Openssl	Version 0.9.8f
Openssl Openssl	Version 0.9.8g
Openssl Openssl	Version 0.9.8h
Openssl Openssl	Version 0.9.8i
Openssl Openssl	Version 0.9.8j
Openssl Openssl	Version 0.9.8k
Openssl Openssl	Version 0.9.8l
Openssl Openssl	Version 0.9.8m
Openssl Openssl	Version 0.9.8n
Openssl Openssl	Version 0.9.8o
Openssl Openssl	Version 1.0.0
Openssl Openssl	Version 1.0.0a

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (78)

http://blogs.sun.com/security/entry/cve_2010_3864_race_condition

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=129916880600544&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=130497251507577&w=2

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=132828103218869&w=2

Source: secalert@redhat.com

http://openssl.org/news/secadv_20101116.txt

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/42241

Source: secalert@redhat.com

http://secunia.com/advisories/42243

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/42309

Source: secalert@redhat.com

http://secunia.com/advisories/42336

Source: secalert@redhat.com

http://secunia.com/advisories/42352

Source: secalert@redhat.com

http://secunia.com/advisories/42397

Source: secalert@redhat.com

http://secunia.com/advisories/42413

Source: secalert@redhat.com

http://secunia.com/advisories/43312

Source: secalert@redhat.com

http://secunia.com/advisories/44269

Source: secalert@redhat.com

http://secunia.com/advisories/57353

Source: secalert@redhat.com

http://security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc

Source: secalert@redhat.com

http://securitytracker.com/id?1024743

Source: secalert@redhat.com

Patch

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793

Source: secalert@redhat.com

http://support.apple.com/kb/HT4723

Source: secalert@redhat.com

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564

Source: secalert@redhat.com

http://www.adobe.com/support/security/bulletins/apsb11-11.html

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2125

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/737740

Source: secalert@redhat.com

US Government Resource

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Source: secalert@redhat.com

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3041

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3077

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3097

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/3121

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=649304

Source: secalert@redhat.com

Patch

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html

Source: secalert@redhat.com

https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2010-0888.html

Source: secalert@redhat.com

http://blogs.sun.com/security/entry/cve_2010_3864_race_condition