CVE-2010-2941

Key facts

CVSS score

9.8 (v3.1)

Severity

CRITICAL

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness (CWE)

CWE-416

EPSS score

6.4% (94th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2010-2945)

Published

November 5, 2010

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / cups
• apple / mac os x
• apple / mac os x server
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• fedoraproject / fedora
• fedoraproject / fedora
• fedoraproject / fedora
• opensuse / opensuse
• opensuse / opensuse
• opensuse / opensuse
• redhat / enterprise linux
• redhat / enterprise linux
• redhat / enterprise linux desktop
• redhat / enterprise linux server
• redhat / enterprise linux workstation
• suse / linux enterprise
• suse / linux enterprise
• suse / linux enterprise
• suse / linux enterprise server

Certified products that may be affected

11 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2] - Red Hat®, Inc. - FIPS 140 2657 - historical
• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
• Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
• Red Hat Enterprise Linux 5 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1387 - historical

See all 11 in the Security Certifications Explorer.

References

• http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox(Broken Link)
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html(Mailing List)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html(Mailing List)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html(Mailing List)
• http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html(Mailing List)
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html(Mailing List)
• http://rhn.redhat.com/errata/RHSA-2010-0811.html(Third Party Advisory)
• http://secunia.com/advisories/42287(Broken Link)
• http://secunia.com/advisories/42867(Broken Link)
• http://secunia.com/advisories/43521(Broken Link)
• http://security.gentoo.org/glsa/glsa-201207-10.xml(Third Party Advisory)
• http://securitytracker.com/id?1024662(Broken Link, Third Party Advisory, VDB Entry)
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323(Broken Link)
• http://support.apple.com/kb/HT4435(Broken Link)
• http://www.debian.org/security/2011/dsa-2176(Mailing List, Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:232(Broken Link)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:233(Broken Link)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:234(Broken Link)
• http://www.osvdb.org/68951(Broken Link)
• http://www.redhat.com/support/errata/RHSA-2010-0866.html(Broken Link)
• http://www.securityfocus.com/bid/44530(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/USN-1012-1(Third Party Advisory)
• http://www.vupen.com/english/advisories/2010/2856(Broken Link, Vendor Advisory)
• http://www.vupen.com/english/advisories/2010/3042(Broken Link)
• http://www.vupen.com/english/advisories/2010/3088(Broken Link)
• http://www.vupen.com/english/advisories/2011/0061(Broken Link)
• http://www.vupen.com/english/advisories/2011/0535(Broken Link)
• https://bugzilla.redhat.com/show_bug.cgi?id=624438(Issue Tracking, Patch)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62882(Third Party Advisory, VDB Entry)