Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues :

  - CVE-2012-0884     Ivan Nestlerode discovered a weakness in the CMS and     PKCS #7 implementations that could allow an attacker to     decrypt data via a Million Message Attack (MMA).

  - CVE-2012-1165     It was discovered that a NULL pointer could be     dereferenced when parsing certain S/MIME messages,     leading to denial of service.

  - CVE-2012-2110     Tavis Ormandy, Google Security Team, discovered a     vulnerability in the way DER-encoded ASN.1 data is     parsed that can result in a heap overflow.

Additionally, the fix for CVE-2011-4619 has been updated to address an issue with SGC handshakes.

Tomas Hoger, Red Hat, discovered that the fix for CVE-2012-2110 for the 0.9.8 series of OpenSSL was incomplete. It has been assigned the CVE-2012-2131 identifier.

The version of OpenSSL installed on the remote host is prior to 0.9.8w. It is, therefore, affected by a vulnerability as referenced in the 0.9.8w advisory.

  - Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to     conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have     unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public     key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110. (CVE-2012-2131)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This compat-openssl097g rollup update contains various security fixes :

  - incorrect integer conversions in OpenSSL could have     resulted in memory corruption during buffer management     operations. (CVE-2012-2131 / CVE-2012-2110)

This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption. (CVE-2012-2110)

Additionally, a check for negative buffer length values was added (CVE-2012-2131) and the stack made non-executable by marking the enhanced Intel SSSE3 assembler code as not needing executable stack.

It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. (CVE-2012-2131)

The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition.
This update fixes the problem.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Solaris system is missing necessary patches to address security updates :

  - The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c     in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1     before 1.0.1a does not properly interpret integer data,     which allows remote attackers to conduct buffer overflow     attacks, and cause a denial of service (memory     corruption) or possibly have unspecified other impact,     via crafted DER data, as demonstrated by an X.509     certificate or an RSA public key. (CVE-2012-2110)

  - Multiple integer signedness errors in     crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote     attackers to conduct buffer overflow attacks, and cause     a denial of service (memory corruption) or possibly have     unspecified other impact, via crafted DER data, as     demonstrated by an X.509 certificate or an RSA public     key. NOTE: this vulnerability exists because of an     incomplete fix for CVE-2012-2110. (CVE-2012-2131)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
58804	Debian DSA-2454-2 : openssl - multiple vulnerabilities	Nessus	Debian Local Security Checks	2012/4/20	2021/1/11	high
200192	OpenSSL 0.9.8v < 0.9.8w Vulnerability	Nessus	Web Servers	2024/6/7	2024/10/7	critical
62060	SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 8262)	Nessus	SuSE Local Security Checks	2012/9/12	2021/1/19	high
64184	SuSE 11.1 Security Update : openssl (SAT Patch Number 6245)	Nessus	SuSE Local Security Checks	2013/1/25	2021/1/19	high
64120	SuSE 11.2 Security Update : compat-openssl097g (SAT Patch Number 6749)	Nessus	SuSE Local Security Checks	2013/1/25	2021/1/19	high
58873	Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 : openssl vulnerability (USN-1428-1)	Nessus	Ubuntu Local Security Checks	2012/4/25	2019/9/19	high
80717	Oracle Solaris Third-Party Patch Update : openssl (multiple_vulnerabilities_in_openssl1)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	high

检测

插件搜索

high

critical

high

high

high

high

high