Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Resource Management Errors Vulnerability - CVE-2010-2939 - Vulnerability Database
OpenSSL

OpenSSL Resource Management Errors Vulnerability - CVE-2010-2939

Medium
Reference: CVE-2010-2939
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-2939
Title: OpenSSL Resource Management Errors Vulnerability
Overview:

Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a 0.9.8 0.9.7 and possibly other versions when using ECDH allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.