PT-2015-1693 · Openssl+9 · Openssl+12

Johannes Bauer · Published 2014-10-24 · Updated 2024-06-15 · CVE-2015-1792

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8 through 0.9.8zg OpenSSL versions 1.0.0 through 1.0.0s OpenSSL versions 1.0.1 through 1.0.1n OpenSSL versions 1.0.2 through 1.0.2b

Description The issue is related to errors in resource management in the do free upto function, which can cause a denial of service (infinite loop) when presented with an unknown hash function OID. This can be triggered by an unrecognized X.660 OID for a hash function, allowing a remote attacker to cause a denial of service. The estimated number of potentially affected devices is not specified.

Recommendations For OpenSSL versions 0.9.8 through 0.9.8zg, update to version 0.9.8zg or later. For OpenSSL versions 1.0.0 through 1.0.0s, update to version 1.0.0s or later. For OpenSSL versions 1.0.1 through 1.0.1n, update to version 1.0.1n or later. For OpenSSL versions 1.0.2 through 1.0.2b, update to version 1.0.2b or later. As a temporary workaround, consider restricting the use of the do free upto function until a patch is available. Avoid using unrecognized X.660 OIDs for hash functions in the affected API endpoints until the issue is resolved.

Exploit

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

ALT-PU-2015-1574

ALT-PU-2015-2113

BDU:2015-11039

CESA-2015_1115

CVE-2015-1792

DLA-247-1

DSA-3287-1

HPSBUX03388

MGASA-2015-0246

OPENSUSE-SU-2015_1139-1

OPENSUSE-SU-2015_1277-1

OPENSUSE-SU-2016_0640-1

OPENSUSE-SU-2024:10271-1

OPENSUSE-SU-2024:10309-1

OPENSUSE-SU-2024:10529-1

OPENSUSE-SU-2024:11127-1

RHSA-2015:1115

RHSA-2015_1115

SUSE-FU-2022:0445-1

SUSE-RU-2015:0769-1

SUSE-SU-2015:0545-1

SUSE-SU-2015:0545-2

SUSE-SU-2015:0546-1

SUSE-SU-2015:1143-1

SUSE-SU-2015:1150-1

SUSE-SU-2015:1182-1

SUSE-SU-2015:1182-2

SUSE-SU-2015:1184-1

SUSE-SU-2015:1184-2

SUSE-SU-2015:1185-1

SUSE-SU-403

USN-2639-1

Affected Products

Alt Linux

Centos

Cisco Ios

Cisco Ios Xe

Cisco Nexus

Cisco Wls

Hp-Ux

Ibm Aix

Junos

Openssl

Red Hat

Suse

Ubuntu

References · 304

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/ssl_version.rb · Exploit
• 🔥 https://github.com/mpgn/poodle-PoC · Exploit
• 🔥 https://github.com/ssllabs/openssl-ccs-cve-2014-0224 · Exploit
• 🔥 https://github.com/secretnonempty/CVE-2014-0224 · Exploit
• 🔥 https://github.com/AbhishekGhosh/FREAK-Attack-CVE-2015-0204-Testing-Script · Exploit
• 🔥 https://github.com/ricedu/CVE-2014-0195 · Exploit
• http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11039 · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0246 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1792 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1115.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-1792 · Vendor Advisory