Lucene search
OpenSSLOPENSSL:CVE-2010-3864HistoryNov 16, 2010 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2010-3864
2010-11-1600:00:00
www.openssl.org
14
9.4 High
AI Score
Confidence
High
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.335 Low
EPSS
Percentile
97.0%
A flaw in the OpenSSL TLS server extension code parsing which on affected servers can be exploited in a buffer overrun attack. Any OpenSSL based TLS server is vulnerable if it is multi-threaded and uses OpenSSL's internal caching mechanism. Servers that are multi-process and/or disable internal session caching are NOT affected.
Related
nessus
nessus
Mandriva Linux Security Advisory : openssl (MDVSA-2010:238)
2010-11-18 00:00:00
OpenSSL < 0.9.8p / 1.0.0b Buffer Overflow
2012-01-04 00:00:00
openSUSE Security Update : libopenssl-devel (openSUSE-SU-2010:0965-2)
2014-06-13 00:00:00
openvas
openvas
FreeBSD Ports: openssl
2011-01-24 00:00:00
Ubuntu Update for openssl vulnerability USN-1018-1
2010-11-23 00:00:00
Mandriva Update for openssl MDVSA-2010:238 (openssl)
2010-11-23 00:00:00
redhat
redhat
(RHSA-2010:0888) Important: openssl security update
2010-11-16 00:00:00
f5
f5
K12566 : OpenSSL vulnerability CVE-2010-3864
2013-07-05 00:00:00
SOL12566 - OpenSSL vulnerability CVE-2010-3864
2011-01-27 00:00:00
osv
osv
openssl - buffer overflow
2010-11-22 00:00:00
freebsd
freebsd
openssl -- TLS extension parsing race condition
2010-10-08 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: openssl-1.0.0b-1.fc14
2010-11-19 22:30:34
[SECURITY] Fedora 14 Update: openssl-1.0.0c-1.fc14
2010-12-10 20:26:33
[SECURITY] Fedora 13 Update: openssl-1.0.0b-1.fc13
2010-11-21 21:53:49
cve
cve
CVE-2010-3864
2010-11-17 16:00:00
ubuntucve
ubuntucve
CVE-2010-3864
2010-11-17 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2010-11-18 00:00:00
securityvulns
securityvulns
OpenSSL buffer overflow
2010-11-19 00:00:00
HP Insight Control multiple security vulnerabilities
2011-04-26 00:00:00
prion
prion
Race condition
2010-11-17 16:00:00
debian
debian
[SECURITY] [DSA-2125-1] New openssl packages fix buffer overflow
2010-11-22 20:17:04
[SECURITY] [DSA-2125-1] New openssl packages fix buffer overflow
2010-11-22 20:17:04
debiancve
debiancve
CVE-2010-3864
2010-11-17 16:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 1.0.0b-alt1
2010-11-16 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.0.0b-alt1
2010-11-16 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 1.0.0b-alt1
2010-11-16 00:00:00
oraclelinux
oraclelinux
openssl security, bug fix, and enhancement update
2011-05-28 00:00:00
openssl security update
2011-02-10 00:00:00
openssl-fips security update
2015-04-02 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-10:10.openssl
2010-11-29 00:00:00
slackware
slackware
[slackware-security] openssl
2010-11-22 07:07:48
ibm
ibm
cert
cert
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
9.4 High
AI Score
Confidence
High
7.6 High
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
0.335 Low
EPSS
Percentile
97.0%
Related for OPENSSL:CVE-2010-3864