NVD

Id
16507  
Name
CVE-2010-5298  
Description
Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-30  
Published
2014-04-14  
Modified Date
2017-01-26  
Seq
2010-5298  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
92414 16507 CVE-2010-5298 http://advisories.mageia.org/MGASA-2014-0187.html  View
92415 16507 CVE-2010-5298 http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig  View
92416 16507 CVE-2010-5298 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629  View
92417 16507 CVE-2010-5298 http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195  View
92418 16507 CVE-2010-5298 FEDORA-2014-9301  View
92419 16507 CVE-2010-5298 FEDORA-2014-9308  View
92420 16507 CVE-2010-5298 SUSE-SU-2015:0743  View
92421 16507 CVE-2010-5298 HPSBMU03057  View
92422 16507 CVE-2010-5298 HPSBMU03056  View
92423 16507 CVE-2010-5298 HPSBMU03055  View
92424 16507 CVE-2010-5298 HPSBMU03051  View
92425 16507 CVE-2010-5298 HPSBGN03068  View
92426 16507 CVE-2010-5298 HPSBMU03074  View
92427 16507 CVE-2010-5298 HPSBMU03062  View
92428 16507 CVE-2010-5298 HPSBMU03076  View
92429 16507 CVE-2010-5298 HPSBHF03052  View
92430 16507 CVE-2010-5298 [oss-security] 20140412 Use-after-free race condition,in OpenSSL"s read buffer  View
92431 16507 CVE-2010-5298 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
92432 16507 CVE-2010-5298 58337  View
92433 16507 CVE-2010-5298 58713  View
92434 16507 CVE-2010-5298 58977  View
92435 16507 CVE-2010-5298 59287  View
92436 16507 CVE-2010-5298 59437  View
92437 16507 CVE-2010-5298 59440  View
92438 16507 CVE-2010-5298 GLSA-201407-05  View
92439 16507 CVE-2010-5298 http://support.citrix.com/article/CTX140876  View
92440 16507 CVE-2010-5298 http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup  View
92441 16507 CVE-2010-5298 20140605 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products  View
92442 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21673137  View
92443 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676035  View
92444 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676062  View
92445 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676419  View
92446 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676529  View
92447 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676655  View
92448 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676879  View
92449 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21676889  View
92450 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21677527  View
92451 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21677695  View
92452 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21677828  View
92453 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21677836  View
92454 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21678167  View
92455 16507 CVE-2010-5298 http://www-01.ibm.com/support/docview.wss?uid=swg21683332  View
92456 16507 CVE-2010-5298 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754  View
92457 16507 CVE-2010-5298 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755  View
92458 16507 CVE-2010-5298 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756  View
92459 16507 CVE-2010-5298 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757  View
92460 16507 CVE-2010-5298 http://www.blackberry.com/btsc/KB36051  View
92461 16507 CVE-2010-5298 http://www.fortiguard.com/advisory/FG-IR-14-018/  View
92462 16507 CVE-2010-5298 http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm  View
92463 16507 CVE-2010-5298 http://www.ibm.com/support/docview.wss?uid=swg21676356  View
92464 16507 CVE-2010-5298 http://www.ibm.com/support/docview.wss?uid=swg24037783  View
92465 16507 CVE-2010-5298 MDVSA-2014:090  View
92466 16507 CVE-2010-5298 MDVSA-2015:062  View
92467 16507 CVE-2010-5298 [5.5] 004: SECURITY FIX: April 12, 2014  View
92468 16507 CVE-2010-5298 http://www.openssl.org/news/secadv_20140605.txt  View
92469 16507 CVE-2010-5298 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
92470 16507 CVE-2010-5298 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
92471 16507 CVE-2010-5298 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
92472 16507 CVE-2010-5298 66801  View
92473 16507 CVE-2010-5298 http://www.tedunangst.com/flak/post/analysis-of-openssl-freelist-reuse  View
92474 16507 CVE-2010-5298 http://www.vmware.com/security/advisories/VMSA-2014-0006.html  View
92475 16507 CVE-2010-5298 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
92476 16507 CVE-2010-5298 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946  View
92477 16507 CVE-2010-5298 https://kb.bluecoat.com/index?page=content&id=SA80  View
92478 16507 CVE-2010-5298 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629  View
92479 16507 CVE-2010-5298 https://kc.mcafee.com/corporate/index?page=content&id=SB10075  View
92480 16507 CVE-2010-5298 https://rt.openssl.org/Ticket/Display.html?id=2167&user=guest&pass=guest  View
92481 16507 CVE-2010-5298 https://rt.openssl.org/Ticket/Display.html?id=3265&user=guest&pass=guest  View
92482 16507 CVE-2010-5298 https://www.novell.com/support/kb/doc.php?id=7015271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39882 JVNDB-2010-005667 OpenSSL の s3_pkt.c の ssl3_read_bytes 関数におけるセッション間でデータを挿入される脆弱性 OpenSSL の s3_pkt.c の ssl3_read_bytes 関数には、SSL_MODE_RELEASE_BUFFERS が有効な場合、競合状態により、セッション間でデータを挿入される、またはサービス運用妨害 (Use-after-free および構文解析エラー) 状態にされる脆弱性が存在します。 CVE-2010-5298 47878 CVE-2010-5298 16507 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005667.html 2010-02-08 2015-12-17 View