Description

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2010-0740

Related Vulnerabilities

WordPress Plugin Dokan-Best WooCommerce Multivendor Marketplace Solution-Build Your Own Amazon, eBay, Etsy Cross-Site Request Forgery (3.2.0)

phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0793)

WordPress Plugin WP Image Zoom Denial of Service (1.23)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Unspecified Vulnerability (5.3.2)

WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (5.7.7)

Severity

Medium

Classification

CVE-2010-0740 CWE-20

Tags

Missing Update Known Vulnerabilities