From 7ac1d4b06be6097d43d1ebf9c21dcdb5201278bf Mon Sep 17 00:00:00 2001 From: Remko Lodder Date: Mon, 26 Feb 2007 20:24:45 +0000 Subject: [PATCH] Document FreeBSD SA 06:23 OpenSSL - Multiple problems in crypto (3). --- security/vuxml/vuln.xml | 63 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index ab09132bd19c..341350217190 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,69 @@ Note: Please add new entries to the beginning of this file. --> + + OpenSSL -- Multiple problems in crypto(3) + + + FreeBSD + 6.16.1_9 + 6.06.0_14 + 5.55.5_7 + 5.45.4_21 + 5.35.3_36 + 4.114.11_24 + + + openssl + 0.9.7l_0 + 0.9.80.9.8d_0 + + + + +

Problem Description:

+

Several problems have been found in OpenSSL:

+
    +
  • During the parsing of certain invalid ASN1 structures an + error condition is mishandled, possibly resulting in an + infinite loop.
    • +
  • A buffer overflow exists in the SSL_get_shared_ciphers + function.
    • +
  • A NULL pointer may be dereferenced in the SSL version 2 + client code.
    • +
+

In addition, many applications using OpenSSL do not perform + any validation of the lengths of public keys being used.

+

Impact:

+

Servers which parse ASN1 data from untrusted sources may be + vulnerable to a denial of service attack.

+

An attacker accessing a server which uses SSL version 2 may + be able to execute arbitrary code with the privileges of that + server.

+

A malicious SSL server can cause clients connecting using + SSL version 2 to crash.

+

Applications which perform public key operations using + untrusted keys may be vulnerable to a denial of service + attack.

+

Workaround:

+

No workaround is available, but not all of the + vulnerabilities mentioned affect all applications.

+ + + + CVE-2006-2937 + CVE-2006-2938 + CVE-2006-2940 + CVE-2006-3738 + CVE-2006-4343 + SA-06:23.openssl + + + 2006-09-28 + 2007-02-26 + + + mozilla -- multiple vulnerabilities