CVE-2010-5298
Fixed in a distro release EPSS 34%
Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
Products: openssl, mariadb, fedoraproject fedora, suse linux_enterprise_desktop, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, suse linux_enterprise_workstation_extension
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.1g-3 |
| Debian 13 | openssl | 1.0.1g-3 |
| Debian 14 | openssl | 1.0.1g-3 |
| Debian 7 | openssl | 1.0.1e-2+deb7u7 |
| Red Hat Enterprise Linux 6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| Red Hat Enterprise Linux 7 | openssl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-debuginfo | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-devel | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-libs | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-perl | 1:1.0.1e-34.el7_0.3 |
| Red Hat Enterprise Linux 7 | openssl-static | 1:1.0.1e-34.el7_0.3 |
| Red Hat storage 2.1 server el6 | openssl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-debuginfo | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-devel | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-perl | 0:1.0.1e-16.el6_5.14 |
| Red Hat storage 2.1 server el6 | openssl-static | 0:1.0.1e-16.el6_5.14 |
| SUSE Linux Enterprise Desktop 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Software Development Kit 12 | mariadb | 10.0.16-15.1 |
| SUSE Linux Enterprise Workstation Extension 12 | mariadb | 10.0.16-15.1 |
| Ubuntu 14.04 LTS | openssl | 1.0.1f-1ubuntu2.1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |