CVE-2010-2939 Use after free in n/a

What is CVE-2010-2939?

CVE-2010-2939 is a medium-severity use after free vulnerability in Openssl Openssl, published on 17 Aug 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.

Weakness: CWE-399

Which versions are affected by CVE-2010-2939?

It affects 1 product.

Products include Openssl Openssl.

How do I fix CVE-2010-2939?

Upgrade to a fixed version.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2010-2939 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-2939 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Openssl Openssl

• CVE-2009-3245 Null dereference in n/a Critical 10.0
• CVE-2006-3738 Memory corruption in n/a Critical 10.0
• CVE-2026-63073 Untrusted Sender DN Used as Format String in CMP Response Validation Critical 9.8
• CVE-2016-6309 Use after free in n/a Critical 9.8
• CVE-2016-0799 Integer overflow in n/a Critical 9.8

All Openssl Openssl vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2010-2939, DSA-2100-1, GHSA-f7m9-58qq-wp2m.