Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2394-1

Опубликовано: 27 сент. 2016
Источник: suse-cvrf

Описание

Security update for openssl

This update for openssl fixes the following issues:

OpenSSL Security Advisory [22 Sep 2016] (bsc#999665)

Severity: High

  • OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666)

Severity: Low

  • Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575)
  • Constant time flag not preserved in DSA signing (CVE-2016-2178) (bsc#983249)
  • DTLS buffered message DoS (CVE-2016-2179) (bsc#994844)
  • OOB read in TS_OBJ_print_bio() (CVE-2016-2180) (bsc#990419)
  • DTLS replay protection DoS (CVE-2016-2181) (bsc#994749)
  • OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819)
  • Birthday attack against 64-bit block ciphers (SWEET32) (CVE-2016-2183) (bsc#995359)
  • Malformed SHA512 ticket DoS (CVE-2016-6302) (bsc#995324)
  • OOB write in MDC2_Update() (CVE-2016-6303) (bsc#995377)
  • Certificate message OOB reads (CVE-2016-6306) (bsc#999668)

More information can be found on: https://www.openssl.org/news/secadv/20160922.txt

Also following bugs were fixed:

  • update expired S/MIME certs (bsc#979475)
  • improve s390x performance (bsc#982745)
  • allow >= 64GB AESGCM transfers (bsc#988591)
  • fix crash in print_notice (bsc#998190)
  • resume reading from /dev/urandom when interrupted by a signal (bsc#995075)

Список пакетов

SUSE Linux Enterprise Desktop 12 SP1
libopenssl1_0_0-1.0.1i-52.1
libopenssl1_0_0-32bit-1.0.1i-52.1
openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1
libopenssl1_0_0-1.0.1i-52.1
libopenssl1_0_0-32bit-1.0.1i-52.1
libopenssl1_0_0-hmac-1.0.1i-52.1
libopenssl1_0_0-hmac-32bit-1.0.1i-52.1
openssl-1.0.1i-52.1
openssl-doc-1.0.1i-52.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
libopenssl1_0_0-1.0.1i-52.1
libopenssl1_0_0-32bit-1.0.1i-52.1
libopenssl1_0_0-hmac-1.0.1i-52.1
libopenssl1_0_0-hmac-32bit-1.0.1i-52.1
openssl-1.0.1i-52.1
openssl-doc-1.0.1i-52.1
SUSE Linux Enterprise Software Development Kit 12 SP1
libopenssl-devel-1.0.1i-52.1

Ссылки

Описание

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки

Описание

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:libopenssl1_0_0-32bit-1.0.1i-52.1
SUSE Linux Enterprise Desktop 12 SP1:openssl-1.0.1i-52.1
SUSE Linux Enterprise Server 12 SP1:libopenssl1_0_0-1.0.1i-52.1
Ссылки
Уязвимость SUSE-SU-2016:2394-1