CVE-2010-0740

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 20%

from disclosure to weapon27 days

Published on NVDMar 26

1st PoC+27d

exploitation probability

20%top 3% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12334

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html http://marc.info/?l=bugtraq&m=127128920008563&w=2 http://marc.info/?l=bugtraq&m=127557640302499&w=2 http://secunia.com/advisories/39932 http://secunia.com/advisories/42724 http://secunia.com/advisories/42733 http://secunia.com/advisories/43311 https://kb.bluecoat.com/index?page=content&id=SA50 https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html