Skip to content
OpenAdvisories
Unscored USN-2192-1 2 CVEs

openssl vulnerabilities

Published May 5, 2014 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenSSL incorrectly handled memory in the
ssl3_read_bytes() function. A remote attacker could use this issue to
possibly cause OpenSSL to crash, resulting in a denial of service.
(CVE-2010-5298)

It was discovered that OpenSSL incorrectly handled memory in the
do_ssl3_write() function. A remote attacker could use this issue to
possibly cause OpenSSL to crash, resulting in a denial of service.
(CVE-2014-0198)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS openssl 1.0.1f-1ubuntu2.1

Vulnerabilities 2

  • Unscored —
    CVE-2010-5298 EPSS 34%

    Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is …

    openssl openssl Debian Ubuntu
  • Unscored —
    CVE-2014-0198 EPSS 40%

    The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does no…

    openssl openssl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2010-5298
  • report
    https://ubuntu.com/security/CVE-2014-0198