OpenSSL: Schwachstelle ermöglicht Denial of Service oder Datenmanipulation

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2010-5298 EPSS 34%

  Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is …

  openssl openssl Debian Ubuntu
  Apr 14, 2014

Revision history

1. 2023-02-27 #32

   Neue Updates von IBM aufgenommen

2. 2022-04-10 #31

   Neue Updates von Oracle Linux aufgenommen

3. 2021-03-31 #30

   Neue Updates von Oracle Linux aufgenommen

4. 2019-08-18 #29

   Neue Updates von Oracle Linux aufgenommen

5. 2018-07-16 #28

   Added references

6. 2015-03-29 #27

   New remediations available

7. 2014-07-23 #23

   New remediations available

8. 2014-07-23 #24

   Version nicht vorhanden

9. 2014-07-23 #25

   New remediations available

10. 2014-07-23 #26

    Version nicht vorhanden

11. 2014-07-06 #21

    New remediations available

12. 2014-07-06 #22

    Version nicht vorhanden

13. 2014-06-29 #19

    New remediations available

14. 2014-06-29 #20

    Version nicht vorhanden

15. 2014-06-19 #17

    New remediations available

16. 2014-06-19 #18

    Version nicht vorhanden

17. 2014-06-15 #15

    New remediations available

18. 2014-06-15 #16

    Version nicht vorhanden

19. 2014-06-11 #10

    New remediations available

20. 2014-06-11 #11

    Version nicht vorhanden

21. 2014-06-11 #12

    Version nicht vorhanden

22. 2014-06-11 #13

    New remediations available

23. 2014-06-11 #14

    Version nicht vorhanden

24. 2014-06-10 #6

    New remediations available

25. 2014-06-10 #7

    New remediations available

References

• IBM Security Bulletin 690129 vom 2023-02-28
  https://www.ibm.com/support/pages/node/690129
• FreeBSD Security Advisory FreeBSD-SA-14:09.openssl vom 2014-05-01
  http://www.freebsd.org/security/advisories/FreeBSD-SA-14:09.openssl.asc
• Ubuntu Security Notice USN-2192-1 vom 2014-05-05
  http://www.ubuntu.com/usn/usn-2192-1/
• Red Hat Security Advisory RHSA-2014:0679-1
  https://rhn.redhat.com/errata/RHSA-2014-0679.html
• VMware Security Advisory VMSA-2014-0006
  http://www.vmware.com/security/advisories/VMSA-2014-0006.html
• Juniper Security Advisory JSA10629
  http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629
• NetBSD Security Advisory 2014-006
  http://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2014-006.txt.asc
• McAfee Security Bulletin SB10075
  https://kc.mcafee.com/corporate/index?page=content&id=SB10075
• F5 Security Advisory sol15328
  http://support.f5.com/kb/en-us/solutions/public/15000/300/sol15328.html?ref=rss
• IBM Security Bulletin 1676419 vom 2014-06-17
  http://www-01.ibm.com/support/docview.wss?uid=swg21676419
• HP Security Bulletin HPSBMU03056 rev. 1
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04349789
• Oracle Third Party Vulnerability Resolution Blog vom 2014-06-23
  https://blogs.oracle.com/sunsecurity/entry/cve_2010_5298_race_conditions
• HP SECURITY BULLETIN c04379485 vom 2014-07-23
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04379485
• HP SECURITY BULLETIN c04378799 vom 2014-07-23
  https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04378799
• Mandriva Security Advisory MDVSA-2015:062 vom 2015-03-27
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A062/
• Oracle Linux Security Advisory ELSA-2019-4581 vom 2019-03-13
  http://linux.oracle.com/errata/ELSA-2019-4581.html
• Oracle Linux Security Advisory ELSA-2019-4747 vom 2019-08-16
  http://linux.oracle.com/errata/ELSA-2019-4747.html
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html