NVD

Id
12285  
Name
CVE-2010-0740  
Description
The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-03-26  
Modified Date
2016-08-22  
Seq
2010-0740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67625 12285 CVE-2010-0740 http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc  View
67626 12285 CVE-2010-0740 APPLE-SA-2011-06-23-1  View
67627 12285 CVE-2010-0740 FEDORA-2010-5744  View
67628 12285 CVE-2010-0740 SSRT100058  View
67629 12285 CVE-2010-0740 SSRT100108  View
67630 12285 CVE-2010-0740 oval:org.mitre.oval:def:11731  View
67631 12285 CVE-2010-0740 http://support.apple.com/kb/HT4723  View
67632 12285 CVE-2010-0740 MDVSA-2010:076  View
67633 12285 CVE-2010-0740 http://www.openssl.org/news/secadv_20100324.txt  View
67634 12285 CVE-2010-0740 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
67635 12285 CVE-2010-0740 1023748  View
67636 12285 CVE-2010-0740 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
67637 12285 CVE-2010-0740 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
67638 12285 CVE-2010-0740 ADV-2010-0710  View
67639 12285 CVE-2010-0740 ADV-2010-0839  View
67640 12285 CVE-2010-0740 ADV-2010-0933  View
67641 12285 CVE-2010-0740 ADV-2010-1216  View
67642 12285 CVE-2010-0740 https://kb.bluecoat.com/index?page=content&id=SA50  View
67643 12285 CVE-2010-0740 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released  View
67644 12285 CVE-2010-0740 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35447 JVNDB-2010-001227 OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性 OpenSSL の ssl/s3_pkt.c の ssl3_get_record 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-0740 43320 CVE-2010-0740 12285 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001227.html 2010-03-24 2011-06-29 View