NVD

Id
13152  
Name
CVE-2010-1633  
Description
RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-03  
Modified Date
2014-03-26  
Seq
2010-1633  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72624 13152 CVE-2010-1633 http://cvs.openssl.org/chngview?cn=19693  View
72625 13152 CVE-2010-1633 http://cvs.openssl.org/filediff?f=openssl/crypto/rsa/rsa_pmeth.c&v1=1.34&v2=1.34.2.1  View
72626 13152 CVE-2010-1633 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
72627 13152 CVE-2010-1633 http://www.openssl.org/news/secadv_20100601.txt  View
72628 13152 CVE-2010-1633 40503  View
72629 13152 CVE-2010-1633 ADV-2010-1313  View
72630 13152 CVE-2010-1633 https://bugzilla.redhat.com/show_bug.cgi?id=598732  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35747 JVNDB-2010-001527 OpenSSL の EVP_PKEY_verify_recover 関数における重要な情報を取得される脆弱性 OpenSSL の EVP_PKEY_verify_recover 関数にある RSA verification recovery には、メモリの初期化失敗時における処理に不備があるため、意図したキー要求を回避させられる、または重要な情報を取得される脆弱性が存在します。 CVE-2010-1633 44213 CVE-2010-1633 13152 6.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001527.html 2010-06-01 2010-06-15 View