CVE-2010-0740

Исходное описание

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

Затронутое ПО

• OpenSSL = 0.9.8l= 0.9.8m= 0.9.8i= 0.9.8h= 0.9.8g= 0.9.8f точное совпадение

Подробности

Опубликовано

2010-03-26

Последнее изменение

2026-06-16

Вектор CVSS

AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE

CWE-20

Ссылки

• cve.org/CVE-2010-0740
• nvd.nist.gov/vuln/detail/CVE-2010-0740
• aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc
• lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
• lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html
• marc.info/?l=bugtraq&m=127128920008563&w=2
• marc.info/?l=bugtraq&m=127557640302499&w=2
• secunia.com/advisories/39932
• secunia.com/advisories/42724
• secunia.com/advisories/42733
• secunia.com/advisories/43311
• support.apple.com/kb/HT4723
• www.mandriva.com/security/advisories?name=MDVSA-2010:076
• www.openssl.org/news/secadv_20100324.txt