CVE-2010-4180
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...
4.3 MediumFix available
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Exploit likelihood
9.50%Up 1.9 points since Feb 4, 2022
What each source reports
NVD Score used
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
CVE-2010-4180- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
CVE-2010-4180- Updated
- 2026-11-02
EUVDEUVD-2010-4155 No score
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
EUVD-2010-4155- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hvp6-pw37-63wh No score
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
GHSA-hvp6-pw37-63wh- Updated
- 2026-11-02
OSV No score
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
CVE-2010-4180- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4180 No score
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
- Record
DEBIAN-CVE-2010-4180- Updated
- 2026-11-02
OSVSUSE-SU-2015:1184-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1184-1- Updated
- 2026-11-02
OSVSUSE-SU-403 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403- Updated
- 2026-11-02
OSVSUSE-SU-403 Forbidden-1 No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403 Forbidden-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 0.9.8o-4 | 0.9.8o-4 |
opensslDebian:13 |
before 0.9.8o-4 | 0.9.8o-4 |
opensslDebian:14 |
before 0.9.8o-4 | 0.9.8o-4 |
opensslDebian:5.0 From an advisory covering 2 CVEs |
before 0.9.8g-15+lenny11, plus listed versions 0.9.8g-150.9.8g-15+lenny10.9.8g-15+lenny30.9.8g-15+lenny50.9.8g-15+lenny60.9.8g-15+lenny70.9.8g-15+lenny80.9.8g-15+lenny9 |
0.9.8g-15+lenny11 |
opensslRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-perlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
opensslRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
Show 66 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-perlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
opensslRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-perlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
opensslRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
openssl-perlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:0.9.7a-43.17.el4_8.6 | 0:0.9.7a-43.17.el4_8.6 |
opensslRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
opensslRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-perlRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
opensslRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
openssl-perlRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.9.8e-12.el5_5.7 | 0:0.9.8e-12.el5_5.7 |
opensslRed Hat:enterprise_linux:6::client |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-develRed Hat:enterprise_linux:6::client |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-perlRed Hat:enterprise_linux:6::client |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-staticRed Hat:enterprise_linux:6::client |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
opensslRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-develRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-perlRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-staticRed Hat:enterprise_linux:6::computenode |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
opensslRed Hat:enterprise_linux:6::server |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-perlRed Hat:enterprise_linux:6::server |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-staticRed Hat:enterprise_linux:6::server |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-develRed Hat:enterprise_linux:6::server |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
opensslRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-perlRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-staticRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
openssl-develRed Hat:enterprise_linux:6::workstation |
before 0:1.0.0-4.el6_0.2 | 0:1.0.0-4.el6_0.2 |
libqt4SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs |
before 4.8.6-7.1 | 4.8.6-7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4180 is a medium vulnerability (CVSS 4.3) in Openssl, published December 6, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.50%, the 95th percentile. Fixed in openssl 0.9.8o-4.
References
lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html
securitytracker.com/id?1024822
secunia.com/advisories/42473
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668471
Show 184 moreShow less
vupen.com/english/advisories/2011/0268
support.apple.com/kb/HT4723
lists.fedoraproject.org/pipermail/package-announce/2010-December/052027.html
securityfocus.com/archive/1/522176
lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
ubuntu.com/usn/usn-1029-1
marc.info?l=bugtraq&m=132077688910227&w=2
osvdb.org/69565
bugzilla.redhat.com/show_bug.cgi?id=659462
kb.cert.org/vuls/id/737740
cvs.openssl.org/chngview?cn=20131
redhat.com/support/errata/RHSA-2010-0977.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18910
openssl.org/news/secadv_20101202.txt
debian.org/security/2011/dsa-2141
mandriva.com/security/advisories?name=MDVSA-2010:248
kb.bluecoat.com/index?page=content&id=SA53&actp=LIST
nvd.nist.gov/vuln/detail/CVE-2010-4180
github.com/advisories/GHSA-hvp6-pw37-63wh
security-tracker.debian.org/tracker/CVE-2010-4180
access.redhat.com/errata/RHSA-2010:0977
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0977.json
cve.org/CVERecord?id=CVE-2008-7270
suse.com/support/update/announcement/2015/suse-su-20151184-1
bugzilla.suse.com/608666