A race condition in the ssl3_read_bytes function can allow remote attackers to inject data across sessions or cause a denial of service. This flaw only affects multithreaded applications using OpenSSL 1.0.0 and 1.0.1, where SSL_MODE_RELEASE_BUFFERS is enabled, which is not the default and not common.

Affected configurations

Vulners

Node

opensslopensslRange1.0.1–1.0.1h

opensslopensslRange1.0.0–1.0.0m

VendorProductVersionCPE
opensslopenssl*cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
openssl	openssl	*	cpe:2.3:a:openssl:openssl::::::::

nessus 83

securityvulns 4

mariadbunix 1

veracode 1

aix 1

debiancve 1

cve 1

freebsd_advisory 1

openvas 33

mageia 1

freebsd 1

f5 2

prion 1

cvelist 1

nvd 1

ubuntucve 1

altlinux 4

osv 1

ubuntu 1

debian 1

ibm 32

kaspersky 1

vmware 2

ics 1

redhat 4

slackware 1

oraclelinux 2

centos 1

gentoo 1

thn 1

huawei 1

intel 1

amazon 1

cisco 1

fortinet 1

avleonov 1

fedora 6

nessus

F5 Networks BIG-IP : OpenSSL vulnerability (K15328)

2014-10-10 00:00:00

openSUSE Security Update : OpenSSL (openSUSE-SU-2014:0592-1)

2014-06-13 00:00:00

Rockwell Automation Stratix SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service (CVE-2010-5298)

2023-11-15 00:00:00

securityvulns

FreeBSD Security Advisory FreeBSD-SA-14:09.openssl [REVISED]

2014-05-01 00:00:00

[USN-2192-1] OpenSSL vulnerabilities

2014-05-05 00:00:00

OpenSSL race conditions

2014-05-05 00:00:00

mariadbunix

CVE-2010-5298

2014-04-14 22:38:08

veracode

Denial Of Service (DoS)

2019-01-15 08:52:47

aix

AIX OpenSSL Vulnerability

2014-06-06 05:44:06

debiancve

CVE-2010-5298

2014-04-14 22:38:08

cve

CVE-2010-5298

2014-04-14 22:38:08

freebsd_advisory

FreeBSD-SA-14:09.openssl

2014-04-30 00:00:00

openvas

Juniper Networks Junos OS SSL Session Injection Vulnerability

2015-01-23 00:00:00

Mageia: Security Advisory (MGASA-2014-0187)

2022-01-28 00:00:00

OpenSSL Multiple DoS Vulnerabilities (20140605 - 3) - Windows

2021-07-30 00:00:00

mageia

Updated openssl packages fix CVE-2010-5298

2014-04-23 20:04:21

freebsd

OpenSSL -- Remote Data Injection / DoS

2010-02-09 00:00:00

SOL15328 - OpenSSL vulnerability CVE-2010-5298

2014-06-13 00:00:00

K15328 : OpenSSL vulnerability CVE-2010-5298

2014-06-20 00:00:00

prion

Race condition

2014-04-14 22:38:00

cvelist

CVE-2010-5298

2014-04-14 16:00:00

nvd

CVE-2010-5298

2014-04-14 22:38:08

ubuntucve

CVE-2010-5298

2014-04-14 00:00:00

altlinux

Security fix for the ALT Linux 8 package openssl10 version 1.0.1h-alt1

2014-06-05 00:00:00

Security fix for the ALT Linux 9 package openssl10 version 1.0.1h-alt1

2014-06-05 00:00:00

Security fix for the ALT Linux 9 package openssl1.1 version 1.0.1h-alt1

2014-06-05 00:00:00

osv

openssl - security update

2014-04-17 00:00:00

ubuntu

OpenSSL vulnerabilities

2014-05-05 00:00:00

debian

[SECURITY] [DSA 2908-1] openssl security update

2014-04-17 21:28:20

ibm

Security Bulletin: IBM QRadar SIEM 7.1 MR2, and 7.2 MR2 are affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298

2018-06-16 21:18:17

Security Bulletin: IBM Real-time Compression Appliance is exposed to the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298.

2018-06-18 00:08:27

Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by the following OpenSSL vulnerabilities: CVE-2014-0224, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

2020-07-24 22:49:37

kaspersky

KLA10382 Multiple vulnerabilities in VMware

2014-06-10 00:00:00

vmware

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

VMware product updates address OpenSSL security vulnerabilities

2014-06-10 00:00:00

ics

Siemens OpenSSL Vulnerabilities (Update G)

2018-08-29 12:00:00

redhat

(RHSA-2014:0625) Important: openssl security update

2014-06-05 00:00:00

(RHSA-2014:0679) Important: openssl security update

2014-06-10 00:00:00

(RHSA-2014:0628) Important: openssl security update

2014-06-05 00:00:00

slackware

[slackware-security] openssl

2014-06-06 05:27:11

oraclelinux

openssl security update

2014-06-05 00:00:00

openssl security update

2014-07-23 00:00:00

centos

openssl security update

2014-06-05 13:06:47

gentoo

OpenSSL: Multiple vulnerabilities

2014-07-27 00:00:00

thn

OpenSSL Vulnerable to Man-in-the-Middle Attack and Several Other Bugs

2014-06-05 05:49:00

huawei

Security Advisory-Multiple OpenSSL vulnerabilities on Huawei products

2014-06-13 00:00:00

intel

Multiple Security Issues with Intel® Manycore Platform Software Stack (Intel® MPSS) release 3.x

2014-08-26 00:00:00

amazon

Important: openssl

2014-06-04 15:45:00

cisco

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products

2014-06-05 22:40:00

fortinet

Multiple Vulnerabilities in OpenSSL

2014-06-06 00:00:00

avleonov

Parsing Nessus v2 XML reports with python

2020-03-09 01:12:00

fedora

[SECURITY] Fedora 19 Update: openssl-1.0.1e-38.fc19

2014-06-05 21:54:15

[SECURITY] Fedora 20 Update: openssl-1.0.1e-38.fc20

2014-06-05 21:55:11

[SECURITY] Fedora 21 Update: mingw-openssl-1.0.1j-1.fc21

2015-01-02 05:06:53

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

AI Score

Confidence

High

EPSS

0.029

Percentile

90.8%

JSON

Related for OPENSSL:CVE-2010-5298