CVE-2010-1633

RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns…

published June 3, 2010

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02392 · 83.7th percentile
Published
2010-06-03T14:00Z
EPSS history
Timeline
  • 03 JUN 14:00Z
    RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns…
    cvelistv5