Skip to content
Fencer Vulns
medium 4.3

CVE-2010-4180 json

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modifica…

published 2010-12-06 15 y ago modified 2026-06-16 4 mo ago also EUVD-2010-4155

cvss
4.3
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
9.5%
EPSS 9.5% chance of exploitation in 30 days, percentile 95%
public exploits
0
none known

Summary

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

Patch / fix

  • openssl openssl 0.9.8q, 1.0.0c
  • f5 nginx 0.9.2
  • openssl Debian 14, Debian 13, Debian 12 0.9.8o-4

debian advisories DEBIAN-CVE-2010-4180

  • openssl RHEL 6 1.0.0-4.el6_0.2
  • openssl-perl RHEL 6 1.0.0-4.el6_0.2
  • openssl RHEL 5 0.9.8e-12.el5_5.7
  • openssl-perl RHEL 5 0.9.8e-12.el5_5.7
  • openssl RHEL 4 0.9.7a-43.17.el4_8.6
  • openssl-perl RHEL 4 0.9.7a-43.17.el4_8.6

red hat advisories RHSA-2010:0979RHSA-2010:0978RHSA-2010:0977

  • libqt4 SLES 12 SP1, SLES 12, SLED 12 SP1 +7 more 4.8.6-7.1
  • libqt4-sql-plugins SLES 12 SP1, SLES 12, SLED 12 SP1 +7 more 4.8.6-7.1

suse advisories SUSE-SU-403SUSE-SU-403 Forbidden-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2010-4180 updated cvss 4.3

openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack

  • Red Hat Enterprise Linux 4 openssl096b Red Hat Enterprise Linux 5 openssl097a Red Hat Enterprise Linux 6 openssl098e
    affected: no fix planned “Will not fix”
  • Red Hat Enterprise Linux (v. 5 server) openssl 0.9.8e-12.el5_5.7, openssl-perl 0.9.8e-12.el5_5.7
    fixed: vendor fix RHSA-2010:0978
  • Red Hat Enterprise Linux AS version 4 openssl 0.9.7a-43.17.el4_8.6, openssl-perl 0.9.7a-43.17.el4_8.6
    fixed: vendor fix RHSA-2010:0977
  • Red Hat Enterprise Linux Desktop (v. 5 client) openssl 0.9.8e-12.el5_5.7, openssl-perl 0.9.8e-12.el5_5.7
    fixed: vendor fix RHSA-2010:0978
  • Red Hat Enterprise Linux Desktop (v. 6) openssl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux Desktop Optional (v. 6) openssl 1.0.0-4.el6_0.2, openssl-perl 1.0.0-4.el6_0.2
    fixed: vendor fix RHSA-2010:0979
  • Red Hat Enterprise Linux Desktop version 4 openssl 0.9.7a-43.17.el4_8.6, openssl-perl 0.9.7a-43.17.el4_8.6
    fixed: vendor fix RHSA-2010:0977
  • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) openssl 0.9.8e-12.el5_5.7
    fixed: vendor fix RHSA-2010:0978
  • Red Hat Enterprise Linux ES version 4 openssl 0.9.7a-43.17.el4_8.6, openssl-perl 0.9.7a-43.17.el4_8.6
    fixed: vendor fix RHSA-2010:0977
show 3 more
  • Red Hat Enterprise Linux HPC Node (v. 6) openssl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux HPC Node Optional (v. 6) openssl 1.0.0-4.el6_0.2, openssl-perl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux Server (v. 6) openssl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux Server Optional (v. 6) openssl 1.0.0-4.el6_0.2, openssl-perl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux Workstation (v. 6) openssl 1.0.0-4.el6_0.2 Red Hat Enterprise Linux Workstation Optional (v. 6) openssl 1.0.0-4.el6_0.2, openssl-perl 1.0.0-4.el6_0.2
    fixed: vendor fix RHSA-2010:0979
  • Red Hat Enterprise Linux WS version 4 openssl 0.9.7a-43.17.el4_8.6, openssl-perl 0.9.7a-43.17.el4_8.6
    fixed: vendor fix RHSA-2010:0977
  • Red Hat JBoss Web Server 1.0
    fixed: vendor fix RHSA-2011:0896

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

9.50% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.