CVE-2010-5298: Fedoraproject Fedora

Medium severity, CVSS 4.0. EPSS: 34.1% chance of exploitation in the next 30 days.

Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.

Affected products

• Fedoraproject Fedora: version 19 only; version 20 only
• MariaDB MariaDB: from 10.0.0, before 10.0.13 (fixed in 10.0.13)
• OpenSSL OpenSSL: up to and including 1.0.1g
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Server: version 12 only
• Suse Linux Enterprise Software Development Kit: version 12 only
• Suse Linux Enterprise Workstation Extension: version 12 only

Published 2014-04-14. Last modified 2026-06-16.