A NULL pointer dereference flaw was found in the way OpenSSL parsed Secure/Multipurpose Internet Mail Extensions (S/MIME) messages. An attacker could use this flaw to crash an application that uses OpenSSL to decrypt or verify S/MIME messages. (CVE-2012-1165)

A flaw was found in the PKCS#7 and Cryptographic Message Syntax (CMS) implementations in OpenSSL. An attacker could possibly use this flaw to perform a Bleichenbacher attack to decrypt an encrypted CMS, PKCS#7, or S/MIME message by sending a large number of chosen ciphertext messages to a service using OpenSSL and measuring error response times. (CVE-2012-0884)

Update to 1.0.1c and synced all patches with Fedora openssl-1.0.1c-7.fc19

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix for CVE-2014-0224 - SSL/TLS MITM vulnerability

  - replace expired GlobalSign Root CA certificate in     ca-bundle.crt

  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack     (#907589)

  - fix for CVE-2013-0166 - DoS in OCSP signatures checking     (#908052)

  - enable compression only if explicitly asked for or     OPENSSL_DEFAULT_ZLIB environment variable is set (fixes     CVE-2012-4929 #857051)

  - use __secure_getenv everywhere instead of getenv     (#839735)

  - fix for CVE-2012-2333 - improper checking for record     length in DTLS (#820686)

  - fix for CVE-2012-2110 - memory corruption in     asn1_d2i_read_bio (#814185)

  - fix problem with the SGC restart patch that might     terminate handshake incorrectly

  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7     code (#802725)

  - fix for CVE-2012-1165 - NULL read dereference on bad     MIME headers (#802489)

  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext     recovery vulnerability and additional DTLS fixes     (#771770)

  - fix for CVE-2011-4109 - double free in policy checks     (#771771)

  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding     (#771775)

  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)

  - add known answer test for SHA2 algorithms (#740866)

  - make default private key length in certificate Makefile     2048 bits (can be changed with PRIVATE_KEY_BITS setting)     (#745410)

  - fix incorrect return value in parse_yesno (#726593)

  - added DigiCert CA certificates to ca-bundle (#735819)

  - added a new section about error states to README.FIPS     (#628976)

  - add missing DH_check_pub_key call when DH key is     computed (#698175)

  - presort list of ciphers available in SSL (#688901)

  - accept connection in s_server even if getaddrinfo fails     (#561260)

  - point to openssl dgst for list of supported digests     (#608639)

  - fix handling of future TLS versions (#599112)

  - added VeriSign Class 3 Public Primary Certification     Authority - G5 and StartCom Certification Authority     certs to ca-bundle (#675671, #617856)

  - upstream fixes for the CHIL engine (#622003, #671484)

  - add SHA-2 hashes in SSL_library_init (#676384)

  - fix CVE-2010-4180 - completely disable code for     SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)

  - fix CVE-2009-3245 - add missing bn_wexpand return checks     (#570924)

  - fix CVE-2010-0433 - do not pass NULL princ to     krb5_kt_get_entry which in the RHEL-5 and newer versions     will crash in such case (#569774)

  - fix CVE-2009-3555 - support the safe renegotiation     extension and do not allow legacy renegotiation on the     server by default (#533125)

  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables     (#510197)

  - fix CVE-2009-4355 - do not leak memory when     CRYPTO_cleanup_all_ex_data is called prematurely by     application (#546707)

It was discovered that OpenSSL could be made to dereference a NULL pointer when processing S/MIME messages. A remote attacker could use this to cause a denial of service. These issues did not affect Ubuntu 8.04 LTS. (CVE-2006-7250, CVE-2012-1165)

Tavis Ormandy discovered that OpenSSL did not properly perform bounds checking when processing DER data via BIO or FILE functions. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. (CVE-2012-2110).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Changes in openssl :

  - S/MIME verification may erroneously fail

  - Free headers after use in error message

  - Symmetric crypto errors in PKCS7_decrypt

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
69669	Amazon Linux AMI : openssl (ALAS-2012-62)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	medium
63031	Fedora 18 : mingw-openssl-1.0.1c-1.fc18 (2012-18035)	Nessus	Fedora Local Security Checks	2012/11/26	2021/1/11	high
79531	OracleVM 2.2 : openssl (OVMSA-2014-0007)	Nessus	OracleVM Local Security Checks	2014/11/26	2022/12/5	high
58808	Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 : openssl vulnerabilities (USN-1424-1)	Nessus	Ubuntu Local Security Checks	2012/4/20	2019/9/19	high
74590	openSUSE Security Update : openssl (openSUSE-SU-2012:0474-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium

检测

插件搜索

medium

high

high

high

medium