CVE-2010-5298 in OpenSSLinfo

Zusammenfassung

von VulDB • 01.07.2026

Race condition nella funzione ssl3_read_bytes di s3_pkt.c in OpenSSL fino alla versione 1.0.1g, quando è abilitata la modalità SSL_MODE_RELEASE_BUFFERS, consente agli attaccanti remoti di iniettare dati tra sessioni o causare un denial of service (use-after-free e errore di parsing) tramite una connessione SSL in un ambiente multithreaded.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

14.04.2014

Veröffentlichung

14.04.2014

Moderieren

akzeptiert

Eintrag

2

Verknüpfen

zeigen

CPE

bereit

EPSS

0.34132

KEV

nein

Aktivitäten

very low

Sektor

Education, Finance, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2010-5298
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2010-5298
CVE Detailshttps://www.cvedetails.com/cve/CVE-2010-5298/

◂ ZurückÜbersichtWeiter ▸

Want to know what is going to be exploited?

We predict KEV entries!