Gravedad: Medio
  Identificadores de CVE : CVE-2010-0740
  Fecha recomendada: 31 de mayo de 2016

  Descripción

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

  Revelación de la información

Apply associated Trend Micro DPI Rules.

  Soluciones

  Trend Micro Deep Security DPI Rule Number: 1004137
  Trend Micro Deep Security DPI Rule Name: 1004137 - OpenSSL 'ssl3_get_record()' Remote Denial Of Service Vulnerability

  Software y versión afectados

  • openssl openssl 0.9.8f
  • openssl openssl 0.9.8g
  • openssl openssl 0.9.8h
  • openssl openssl 0.9.8i
  • openssl openssl 0.9.8j
  • openssl openssl 0.9.8k
  • openssl openssl 0.9.8l
  • openssl openssl 0.9.8m