Schweregrad:: Mittel
  CVE Kennungen:: CVE-2010-0740
  Hinweisdatum: 31 Mai 2016

  Beschreibung

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

  Trend Micro Lösungen

Apply associated Trend Micro DPI Rules.

  Lösungen

  Trend Micro Deep Security DPI Rule Number: 1004137
  Trend Micro Deep Security DPI Rule Name: 1004137 - OpenSSL 'ssl3_get_record()' Remote Denial Of Service Vulnerability

  Betroffene Software und Version:

  • openssl openssl 0.9.8f
  • openssl openssl 0.9.8g
  • openssl openssl 0.9.8h
  • openssl openssl 0.9.8i
  • openssl openssl 0.9.8j
  • openssl openssl 0.9.8k
  • openssl openssl 0.9.8l
  • openssl openssl 0.9.8m