PT-2015-1695 · Openssl+3 · Openssl+3

John Sullivan · Published 2014-10-24 · Updated 2018-01-05 · CVE-2015-3216

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.1e-25.el7

Description The issue is related to a race condition in the PRNG lock implementation in the ssleay rand bytes function in OpenSSL, which can cause a denial of service (application crash) when many TLS sessions are established to a multithreaded server. This can lead to the use of a negative value for a certain length field. Additionally, the vulnerability is associated with a buffer overflow in dynamic memory caused by an integer overflow, allowing a remote attacker to cause a denial of service by establishing multiple TLS sessions.

Recommendations For OpenSSL version 1.0.1e-25.el7, consider restricting access to the ssleay rand bytes function as a temporary workaround until a patch is available. Avoid using the function in multithreaded servers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Weakness Enumeration

CWE-362

CWE-189

Related Identifiers

BDU:2015-11041

CESA-2015_1115

CVE-2015-3216

OPENSUSE-SU-2015_1139-1

RHSA-2015:1115

RHSA-2015_1115

SUSE-SU-2015:1143-1

SUSE-SU-2015:1150-1

SUSE-SU-403

Affected Products

Centos

Openssl

Red Hat

Suse

References · 179

• https://linux.oracle.com/errata/ELSA-2015-1115.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2015:1150-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:1143-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2957.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11035 · Security Note
• https://bdu.fstec.ru/vul/2015-11036 · Security Note
• https://bdu.fstec.ru/vul/2015-11041 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3216 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789 · Security Note