Race condition in OpenSSL - CVE-2010-5298

Vulnerability identifier: #VU11535

CSH Severity: Medium

CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2010-5298

CWE-ID: CWE-362

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack or modify encrypted connection.

The vulnerability exists due to a race condition in the ssl3_read_bytes() function in OpenSSL. A remote attacker can inject data across sessions or cause a denial of service

Successful exploitation of the vulnerability requires that SSL_MODE_RELEASE_BUFFERS is enabled.

OpenSSL
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Fedora
Red Hat Enterprise Linux EUS Compute Node
Ubuntu
Slackware Linux
openssl (Alpine package)
mingw-openssl
HPE OneView
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2
IBM BladeCenter Advanced Management Module
HP Smart Update Manager

Update to version 1.0.0m or 1.0.1h.

openssl (Alpine package) - update to 1.0.1g-r1
mingw-openssl - addressed in versions 1.0.1j-1.el7, 1.0.1j-1.fc21
IBM BladeCenter Advanced Management Module - update to 3.66F
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1 - update to 5.6.2
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1 - update to 5.6.2
TMS RAMSAN 720 and 820 machine type 9834 -AS2 & AE2 - update to 6.3.2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2 - update to 6.3.2
HP Smart Update Manager - update to 6.4.1

• https://www.openssl.org/news/secadv/20140605.txt

• Multiple vulnerabilities in OpenSSL
• Ubuntu update for OpenSSL
• Gentoo update for OpenSSL
• Slackware Linux update for openssl
• Red Hat update for openssl
• Red Hat update for openssl
• Race condition in openssl (Alpine package)
• Multiple vulnerabilities in IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems
• Multiple vulnerabilities in HP OneView
• Multiple vulnerabilities in HP Smart Update Manager (HP SUM)
• Multiple vulnerabilities in IBM BladeCenter Advanced Management Module
• Fedora 21 update for mingw-openssl
• Fedora EPEL 7 update for mingw-openssl