{"id":"CVE-2010-5298","url":"https://www.cyber-defence.io/tools/cve/CVE-2010-5298","generatedAt":"2026-11-05T07:06:39.078Z","title":"Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an…","description":"Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.","published":"2014-04-14T22:38:09.000Z","lastModified":"2026-06-16T23:26:30.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":4,"severity":"MEDIUM","vector":"AV:N/AC:H/Au:N/C:N/I:P/A:P"},"cwe":["CWE-362"],"affected":["openssl/openssl","mariadb/mariadb","fedoraproject/fedora","suse/linux enterprise desktop","suse/linux enterprise server","suse/linux enterprise software development kit","suse/linux enterprise workstation extension"],"epss":{"score":0.34132,"percentile":0.98407,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 34.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://advisories.mageia.org/MGASA-2014-0187.html","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://ftp.openbsd.org/pub/OpenBSD/patches/5.5/common/004_openssl.patch.sig","tags":["Patch","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=KB29195","tags":["Permissions Required"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140389274407904&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140389355508263&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140431828824371&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140448122410568&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140544599631400&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140621259019789&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140752315422991&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=140904544427729&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=141658880509699&w=2","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://openwall.com/lists/oss-security/2014/04/13/1","tags":["Mailing List","Patch"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/58337","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/58713","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/58939","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/58977","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59162","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59287","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59300","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59301","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59342","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59413","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59437","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59438","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59440","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59450","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59490","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59655","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59666","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59669","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/59721","tags":["Not Applicable"],"source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201407-05.xml","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://support.citrix.com/article/CTX140876","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://svnweb.freebsd.org/ports/head/security/openssl/files/patch-ssl-s3_pkt.c?revision=351191&view=markup","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21673137","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676035","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676062","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676419","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676529","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676655","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676879","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676889","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677527","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677695","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677828","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677836","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21678167","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21683332","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757","tags":["Broken Link"],"source":"cve@mitre.org"},{"url":"http://www.blackberry.com/btsc/KB36051","tags":["Broken Link"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-5298","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}