Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-2939 — Double Free in Openssl

CWE-39911 documents11 sources
Severity
4.3MEDIUMNVD
EPSS
10.3%
top 6.81%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
7
OpensslDebian OpensslVmware Esxi+4 more
Timeline
PublishedAug 17
Latest updateMay 14

Description

Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages8 packages

▶debiandebian/openssl< openssl 0.9.8o-2 (bookworm)
▶Debianopenssl/openssl< 0.9.8o-2+3
▶NVDopenssl/openssl0.9.7, 0.9.8, 1.0.0a+2
▶vmwarevmware/esxi

🔴Vulnerability Details

2
GHSA
GHSA-f7m9-58qq-wp2m: Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt↗2022-05-14
▶
OSV
CVE-2010-2939: Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt↗2010-08-17
▶

💥Exploits & PoCs

1
Exploit-DB
OpenSSL - 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption↗2010-08-07
▶

📋Vendor Advisories

5
VMware
Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX↗2011-02-10
▶
BSD
FreeBSD-SA-10:10.openssl: OpenSSL multiple vulnerabilities↗2010-11-29
▶
Ubuntu
OpenSSL vulnerabilities↗2010-10-07
▶
Red Hat
openssl: double-free vulnerability in ssl3_get_key_exchange()↗2010-08-07
▶
Debian
CVE-2010-2939: openssl - Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL c...↗2010
▶

📄Research Papers

1
arXiv
Too Quiet in the Library: An Empirical Study of Security Updates in Android Apps' Native Code↗2021-03-03
▶

💬Community

1
Bugzilla
CVE-2010-2939 openssl: double-free vulnerability in ssl3_get_key_exchange()↗2010-08-11
▶