Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2010-0742
HistoryJun 03, 2010 - 2:30 p.m.

Double free

2010-06-0314:30:00
PRIOn knowledge base
www.prio-n.com
5

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.251 Low

EPSS

Percentile

96.5%

JSON

The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.

References

Related

altlinux 4
openvas 20
nessus 10
checkpoint_advisories 1
openssl 1
attackerkb 1
seebug 2
cve 1
ubuntucve 1
debiancve 1
f5 2
fedora 7
gentoo 1
ibm 6
lenovo 2
oraclelinux 3
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8o-alt1
2010-09-29 00:00:00
Security fix for the ALT Linux 6 package openssl10 version 0.9.8o-alt1
2010-09-29 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8o-alt1
2010-09-29 00:00:00
openvas
openvas
HP-UX Update for OpenSSL HPSBUX02610
2011-01-04 00:00:00
OpenSSL Cryptographic Message Syntax Memory Corruption Vulnerability
2010-06-04 00:00:00
HP-UX Update for OpenSSL HPSBUX02610
2011-01-04 00:00:00
nessus
nessus
Fedora 11 : openssl-0.9.8n-2.fc11 (2010-9421)
2010-07-01 00:00:00
F5 Networks BIG-IP : OpenSSL vulnerability (K17248)
2015-09-10 00:00:00
Fedora 13 : openssl-1.0.0a-1.fc13 (2010-9574)
2010-07-01 00:00:00
checkpoint_advisories
checkpoint_advisories
OpenSSL CMS Structure OriginatorInfo Memory Corruption (CVE-2010-0742)
2010-08-01 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2010-0742
2010-06-01 00:00:00
attackerkb
attackerkb
CVE-2010-0742
2010-06-03 00:00:00
seebug
seebug
OpenSSL CMS结构处理内存破坏漏洞
2010-06-04 00:00:00
OpenSSL Cryptographic Message Syntax "OriginatorInfo" Vulnerability
2010-06-03 00:00:00
cve
cve
CVE-2010-0742
2010-06-03 14:30:00
ubuntucve
ubuntucve
CVE-2010-0742
2010-06-03 00:00:00
debiancve
debiancve
CVE-2010-0742
2010-06-03 14:30:00
f5
f5
K17248 : OpenSSL vulnerability CVE-2010-0742
2015-09-24 00:00:00
SOL17248 - OpenSSL vulnerability CVE-2010-0742
2015-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: openssl-1.0.0a-1.fc13
2010-06-15 15:59:21
[SECURITY] Fedora 13 Update: openssl-1.0.0b-1.fc13
2010-11-21 21:53:49
[SECURITY] Fedora 12 Update: openssl-1.0.0a-1.fc12
2010-06-16 17:44:27
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
Security Bulletin: Tivoli Management Framework affected by vulnerabilities in OpenSSL versions prior to 1.0.0
2022-09-25 23:13:40
Security Bulletin: Storage HMC OpenSSL upgrade to address cryptographic vulnerabilities.
2018-06-18 00:07:41
Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities
2022-09-26 05:45:55
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.251 Low

EPSS

Percentile

96.5%

JSON
Related for PRION:CVE-2010-0742
altlinux4openvas20nessus10checkpoint_advisories1openssl1attackerkb1seebug2cve1ubuntucve1debiancve1f52fedora7gentoo1ibm6lenovo2oraclelinux3