Launchpad.net

CVE 2010-2939

Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.

Related bugs and status

CVE-2010-2939 (Candidate) is related to these bugs:

Bug #655884: CVE-2009-3245 not fixed for 8.04LTS

		In	Importance	Status
655884	CVE-2009-3245 not fixed for 8.04LTS	openssl (Ubuntu)	Low	Fix Released
655884	CVE-2009-3245 not fixed for 8.04LTS	openssl (Ubuntu Dapper)	Low	Fix Released
655884	CVE-2009-3245 not fixed for 8.04LTS	openssl (Ubuntu Hardy)	Low	Fix Released
655884	CVE-2009-3245 not fixed for 8.04LTS	openssl (Ubuntu Jaunty)	Low	Fix Released
655884	CVE-2009-3245 not fixed for 8.04LTS	openssl (Ubuntu Karmic)	Low	Fix Released

Bug #675566: Merge 1.0.0d-2 from debian/unstable

Summary				In	Importance	Status
	675566	Merge 1.0.0d-2 from debian/unstable		openssl (Ubuntu)	Wishlist	Fix Released
	675566	Merge 1.0.0d-2 from debian/unstable		openssl (Debian)	Unknown	Fix Released

Bug #677756: Merge openssl 0.9.8o-3 (main) from Debian unstable (main)

Summary				In	Importance	Status
	677756	Merge openssl 0.9.8o-3 (main) from Debian unstable (main)		openssl (Ubuntu)	Wishlist	Fix Released

Bug #700198: CVE-2009-0793

		In	Importance	Status
700198	CVE-2009-0793	lcms (Ubuntu)	Undecided	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu)	Low	Fix Released
700198	CVE-2009-0793	gimp (Ubuntu)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu)	Low	Fix Released
700198	CVE-2009-0793	gimp (Ubuntu Hardy)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu Hardy)	Low	Fix Released
700198	CVE-2009-0793	lcms (Ubuntu Hardy)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu Hardy)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu Hardy)	Undecided	Invalid
700198	CVE-2009-0793	gimp (Ubuntu Karmic)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu Karmic)	Low	Fix Released
700198	CVE-2009-0793	lcms (Ubuntu Karmic)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu Karmic)	Undecided	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu Karmic)	Undecided	Invalid
700198	CVE-2009-0793	gimp (Ubuntu Lucid)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu Lucid)	Low	Fix Released
700198	CVE-2009-0793	lcms (Ubuntu Lucid)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu Lucid)	Undecided	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu Lucid)	Low	Fix Released
700198	CVE-2009-0793	gimp (Ubuntu Maverick)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu Maverick)	Low	Fix Released
700198	CVE-2009-0793	lcms (Ubuntu Maverick)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu Maverick)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu Maverick)	Low	Fix Released
700198	CVE-2009-0793	gimp (Ubuntu Natty)	Undecided	Invalid
700198	CVE-2009-0793	ia32-libs (Ubuntu Natty)	Low	Fix Released
700198	CVE-2009-0793	lcms (Ubuntu Natty)	Undecided	Fix Released
700198	CVE-2009-0793	openjdk-6 (Ubuntu Natty)	Low	Fix Released
700198	CVE-2009-0793	openjdk-6b18 (Ubuntu Natty)	Low	Fix Released

Bug #1811531: remote execution vulnerability

		In	Importance	Status
1811531	remote execution vulnerability	zeromq3 (Ubuntu)	Undecided	Fix Released
1811531	remote execution vulnerability	zeromq3 (Debian)	Unknown	Fix Released
1811531	remote execution vulnerability	zeromq (Suse)	High	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2010-2939

Related bugs and status

Related bugs

References