NVD

Id
15199  
Name
CVE-2010-3864  
Description
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-17  
Modified Date
2016-08-22  
Seq
2010-3864  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
85547 15199 CVE-2010-3864 http://blogs.sun.com/security/entry/cve_2010_3864_race_condition  View
85548 15199 CVE-2010-3864 SSRT100413  View
85549 15199 CVE-2010-3864 APPLE-SA-2011-06-23-1  View
85550 15199 CVE-2010-3864 FEDORA-2010-17827  View
85551 15199 CVE-2010-3864 FEDORA-2010-17847  View
85552 15199 CVE-2010-3864 FEDORA-2010-17826  View
85553 15199 CVE-2010-3864 SUSE-SR:2010:022  View
85554 15199 CVE-2010-3864 SSRT100339  View
85555 15199 CVE-2010-3864 SSRT100475  View
85556 15199 CVE-2010-3864 HPSBGN02740  View
85557 15199 CVE-2010-3864 http://openssl.org/news/secadv_20101116.txt  View
85558 15199 CVE-2010-3864 FreeBSD-SA-10:10  View
85559 15199 CVE-2010-3864 1024743  View
85560 15199 CVE-2010-3864 SSA:2010-326-01  View
85561 15199 CVE-2010-3864 http://support.apple.com/kb/HT4723  View
85562 15199 CVE-2010-3864 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564  View
85563 15199 CVE-2010-3864 http://www.adobe.com/support/security/bulletins/apsb11-11.html  View
85564 15199 CVE-2010-3864 DSA-2125  View
85565 15199 CVE-2010-3864 VU#737740  View
85566 15199 CVE-2010-3864 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
85567 15199 CVE-2010-3864 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
85568 15199 CVE-2010-3864 ADV-2010-3041  View
85569 15199 CVE-2010-3864 ADV-2010-3077  View
85570 15199 CVE-2010-3864 ADV-2010-3097  View
85571 15199 CVE-2010-3864 ADV-2010-3121  View
85572 15199 CVE-2010-3864 https://bugzilla.redhat.com/show_bug.cgi?id=649304  View
85573 15199 CVE-2010-3864 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released  View
85574 15199 CVE-2010-3864 [syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released  View
85575 15199 CVE-2010-3864 RHSA-2010:0888  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36706 JVNDB-2010-002486 OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性 OpenSSL の ssl/t1_lib.c は、TLS サーバ上でマルチスレッドおよび内部キャッシュが有効の際、 TLS サーバ名の拡張子や楕円曲線暗号に関する処理に不備があるため、競合状態となり、任意のコードを実行される脆弱性が存在します。 CVE-2010-3864 46444 CVE-2010-3864 15199 7.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002486.html 2010-11-16 2012-06-20 View