Shi Lei

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.12 Description: The issue is related to the implementation of the Kerberos 5 protocol in the Linux kernel, specifically with the handling of RXRPC keys. It could lead to a buffer overflow when decoding Kerberos 5 tickets, potentially causing memory corruption and possible privilege escalation. The vulnerability may allow an attacker to elevate their privileges or cause a denial of service. Recommendations: For Linux kernel versions prior to 4.12, update to version 4.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the Kerberos 5 protocol or disabling the use of RXRPC keys until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions 1.1.0 through 1.1.0a **Description** The issue is related to an error in the resource control mechanism of the state-machine implementation in OpenSSL, specifically in statem/statem.c and statem/statem lib.c. This could allow a remote attacker to cause a denial of service through crafted TLS messages by consuming excessive memory. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For OpenSSL versions 1.1.0 through 1.1.0a, update to version 1.1.0a or later to resolve the issue. As a temporary workaround, consider restricting access to the `statem/statem.c` and `statem/statem lib.c` components to minimize the risk of exploitation. Avoid using crafted TLS messages that could trigger the denial of service until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions prior to 1.1.0 **Description** The issue is related to the BN bn2dec function in the crypto/bn/bn print.c file of the OpenSSL library, which does not properly validate division results. This allows remote attackers to cause a denial of service, such as an out-of-bounds write and application crash, or possibly have other unspecified impacts via unknown vectors. **Recommendations** For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the BN bn2dec function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions prior to 1.1.0 **Description** The issue is related to the Anti-Replay feature in the DTLS implementation, which mishandles early use of a new epoch number in conjunction with a large sequence number. This allows remote attackers to cause a denial of service via spoofed DTLS records. The vulnerability is related to the files rec layer d1.c and ssl3 record.c. **Recommendations** For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DTLS implementation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions prior to 1.0.1u OpenSSL versions prior to 1.0.2i OpenSSL versions prior to 1.1.0a MySQL Server versions 5.6.33 and earlier MySQL Server versions 5.7.15 and earlier **Description** The issue is related to multiple memory leaks in the t1 lib.c file of the OpenSSL library, which can be exploited by remote attackers to cause a denial of service via large OCSP Status Request extensions. This can lead to memory consumption and potentially cause the application to crash. Additionally, a vulnerability in the MySQL Server component can allow a high-privileged attacker with network access to compromise the server, resulting in unauthorized ability to cause a hang or crash. **Recommendations** For OpenSSL versions prior to 1.0.1u, update to version 1.0.1u or later. For OpenSSL versions prior to 1.0.2i, update to version 1.0.2i or later. For OpenSSL versions prior to 1.1.0a, update to version 1.1.0a or later. For MySQL Server versions 5.6.33 and earlier, update to a version later than 5.6.33. For MySQL Server versions 5.7.15 and earlier, update to a version later than 5.7.15. As a temporary workaround, consider restricting access to the `t1 lib.c` file or disabling the use of large OCSP Status Request extensions until a patch is available.

**Name of the Vulnerable Software and Affected Versions** OpenSSL versions 1.0.2h and earlier **Description** The issue is related to a denial of service caused by an out-of-bounds read and application crash. This can be triggered by a remote attacker via a crafted time-stamp file that is mishandled by the "openssl ts" command. The problem is associated with the TS OBJ print bio function in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation. Additionally, there is a mention of a missing CRL sanity check that could also lead to a denial of service. **Recommendations** For OpenSSL versions 1.0.2h and earlier, update to a version that includes the necessary patches to address the denial of service issue. As a temporary workaround, consider restricting the use of the "openssl ts" command until a patch is available. Avoid using crafted time-stamp files that could exploit the TS OBJ print bio function.