CVE-2010-0742
EPSS 22.1%
Description
The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
How to fix CVE-2010-0742
To remediate CVE-2010-0742, upgrade the affected package to a fixed version below.
- Debian/openssl—upgrade to 1.0.0e-1 or later
Is CVE-2010-0742 being exploited?
Moderate — EPSS is 22.1%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 1.0.0e-1