Description
Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 0.9.8o-2 | — |
| Debian 13 | openssl | 0.9.8o-2 | — |
| Debian 12 | openssl | 0.9.8o-2 | — |
| Debian 5.0 | openssl | 0.9.8g-15+lenny8 | DSA-2100-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 SP1 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4 +1 | 4.8.6-7.1 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
| SLES for SAP 12 | libqt4-devel-doc | 4.8.6-7.3 | SUSE-SU-403 Forbidden-1, SUSE-SU-403 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 | openSUSE-SU-2024:11127-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption EDB-34427 · dos · Aug 7, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 4
- DSA-2100-1 openssl - double free Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-403 Forbidden-1 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-403 Security update for OpenSSL SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11127-1 libopenssl-1_1-devel-1.1.1l-1.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- SSA:2010-326-01 vendor-advisory
- [openssl-dev] 20100808 Re: openssl-1.0.0a and glibc detected sthg ;) mailing-list
- HPSBMA02662 vendor-advisory
- 42413 third-party-advisory
- 40906 third-party-advisory
- DSA-2100 vendor-advisory
- [oss-security] 20100812 Re: CVE Request: openssl double free mailing-list
- 20100807 openssl-1.0.0a mailing-list
- ADV-2010-2229 vdb-entry
- ADV-2010-2038 vdb-entry
- 1024296 vdb-entry
- USN-1003-1 vendor-advisory
- 42309 third-party-advisory
- ADV-2010-3077 vdb-entry
- FreeBSD-SA-10:10 vendor-advisory
- 43312 third-party-advisory
- SUSE-SR:2010:021 vendor-advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- [openssl-dev] 20100807 openssl-1.0.0a and glibc detected sthg ;) mailing-list
- [openssl-dev] 20100807 Re: openssl-1.0.0a and glibc detected sthg ;) mailing-list
- 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX mailing-list
- 41105 third-party-advisory