CVE-2010-3864
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...
CVE-2010-3864 is a high vulnerability (CVSS 7.6) in Openssl, published November 17, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.1%, the 97th percentile. Fixed in openssl 0.9.8o-3.
- Severity
- 7.6 HighCVSS 2.0, NVD
- Exploit chance
- 22.1%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.9.8o-3openssl +51 more
Description
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 | before 0.9.8o-3 | 0.9.8o-3 |
opensslDebian:13 | before 0.9.8o-3 | 0.9.8o-3 |
opensslDebian:14 | before 0.9.8o-3 | 0.9.8o-3 |
opensslDebian:5.0 | before 0.9.8g-15+lenny9, plus listed versions 0.9.8g-150.9.8g-15+lenny10.9.8g-15+lenny30.9.8g-15+lenny50.9.8g-15+lenny60.9.8g-15+lenny70.9.8g-15+lenny8 | 0.9.8g-15+lenny9 |
opensslRed Hat:enterprise_linux:6::client | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::client | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-develRed Hat:enterprise_linux:6::client | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-perlRed Hat:enterprise_linux:6::client | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-staticRed Hat:enterprise_linux:6::client | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
opensslRed Hat:enterprise_linux:6::computenode | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssl-debuginfoRed Hat:enterprise_linux:6::computenode | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-develRed Hat:enterprise_linux:6::computenode | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-perlRed Hat:enterprise_linux:6::computenode | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-staticRed Hat:enterprise_linux:6::computenode | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
opensslRed Hat:enterprise_linux:6::server | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::server | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-perlRed Hat:enterprise_linux:6::server | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-staticRed Hat:enterprise_linux:6::server | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-develRed Hat:enterprise_linux:6::server | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
opensslRed Hat:enterprise_linux:6::workstation | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-debuginfoRed Hat:enterprise_linux:6::workstation | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-perlRed Hat:enterprise_linux:6::workstation | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-staticRed Hat:enterprise_linux:6::workstation | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
openssl-develRed Hat:enterprise_linux:6::workstation | before 0:1.0.0-4.el6_0.1 | 0:1.0.0-4.el6_0.1 |
libqt4SUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Desktop 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Software Development Kit 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-devel-docSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.3 | 4.8.6-7.3 |
libqt4-sql-pluginsSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4SUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
libqt4-sql-pluginsSUSE:Linux Enterprise Workstation Extension 12 SP1 From an advisory covering 54 CVEs | before 4.8.6-7.1 | 4.8.6-7.1 |
stunnelopenSUSE:Tumbleweed From an advisory covering 5 CVEs | before 5.38-1.1 | 5.38-1.1 |
openssl-1_1openSUSE:Tumbleweed From an advisory covering 136 CVEs | before 1.1.1l-1.2 | 1.1.1l-1.2 |
What each source reports
NVD Score used
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
CVE-2010-3864- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE ListNo score
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
CVE-2010-3864- Updated
- 2026-11-02
EUVDEUVD-2010-3842No score
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
EUVD-2010-3842- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvq6-rpm5-73fgNo score
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
GHSA-rvq6-rpm5-73fg- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVNo score
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
CVE-2010-3864- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-3864No score
Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.
- Record
DEBIAN-CVE-2010-3864- Updated
- 2026-11-02
Show 8 moreShow less
OSVopenSUSE-SU-2024:10271-1No score
libopenssl-devel-1.0.2j-2.2 on GA media
These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10271-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10289-1No score
stunnel-5.38-1.1 on GA media
These are all security issues fixed in the stunnel-5.38-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10289-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10529-1No score
libopenssl1_0_0-steam-1.0.2h-4.1 on GA media
These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10529-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11127-1No score
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11127-1- Updated
- 2026-11-02
OSVSUSE-FU-2022:0445-1No score
Feature update for venv-salt-minion
This feature update for venv-salt-minion provides the following changes:
- Introduce
venv-salt-minion. - Mention fixed issues provided with the bundle.
- Record
SUSE-FU-2022:0445-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1184-1No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-2015:1184-1- Updated
- 2026-11-02
OSVSUSE-SU-403No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403- Updated
- 2026-11-02
OSVSUSE-SU-403 Forbidden-1No score
Security update for OpenSSL
This OpenSSL update fixes the following issues:
* Session Ticket Memory Leak (CVE-2014-3567)
* Build option no-ssl3 is incomplete (CVE-2014-3568)
* Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE)
Security Issues:
* CVE-2014-3567
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567>
* CVE-2014-3566
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566>
* CVE-2014-3568
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568>
- Record
SUSE-SU-403 Forbidden-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html
marc.info?l=bugtraq&m=132828103218869&w=2
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.668793
www-01.ibm.com/support/docview.wss?uid=ssg1S1004564
vupen.com/english/advisories/2010/3041
support.apple.com/kb/HT4723
Show 194 moreShow less
securitytracker.com/id?1024743
blogs.sun.com/security/entry/cve_2010_3864_race_condition
secunia.com/advisories/42413
openssl.org/news/secadv_20101116.txt
lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html
lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html
kb.cert.org/vuls/id/737740
rhn.redhat.com/errata/RHSA-2010-0888.html
bugzilla.redhat.com/show_bug.cgi?id=649304
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777
adobe.com/support/security/bulletins/apsb11-11.html
security.FreeBSD.org/advisories/FreeBSD-SA-10:10.openssl.asc
vmware.com/security/advisories/VMSA-2011-0003.html
securityfocus.com/archive/1/516397/100/0/threaded
debian.org/security/2010/dsa-2125
nvd.nist.gov/vuln/detail/CVE-2010-3864
access.redhat.com/errata/RHSA-2010:0888
github.com/advisories/GHSA-rvq6-rpm5-73fg
security-tracker.debian.org/tracker/CVE-2010-3864
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0888.json
cve.org/CVERecord?id=CVE-2010-3864
suse.com/support/update/announcement/-2022-445/suse-fu-20220445-1
bugzilla.suse.com/1000080
Left out here: 568 references. The JSON record has them.