PT-2016-3387 · Openssl+11 · Openssl+11

Published 2016-09-16 · Updated 2024-06-15 · CVE-2016-6302

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.1.0

Description The issue is related to the tls decrypt ticket function in ssl/t1 lib.c, which does not properly validate the ticket length, considering the HMAC size. This allows remote attackers to cause a denial of service by providing a ticket that is too short. The vulnerability can be exploited by attempting to use a malformed ticket, leading to a denial of service.

Recommendations For versions prior to 1.1.0, update to version 1.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the tls decrypt ticket function until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2016-2005

BDU:2022-02462

CESA-2016_1940

CVE-2016-6302

DLA-637-1

DSA-3673-1

MGASA-2016-0338

MGASA-2016-0408

OPENSUSE-SU-2016_2391-1

OPENSUSE-SU-2016_2407-1

OPENSUSE-SU-2016_2537-1

OPENSUSE-SU-2018_0458-1

OPENSUSE-SU-2024:10271-1

OPENSUSE-SU-2024:11127-1

RHSA-2016:1940

RHSA-2016_1940

RHSA-2018:2185

RHSA-2018:2186

SUSE-FU-2022:0445-1

SUSE-SU-2016:2387-1

SUSE-SU-2016:2394-1

SUSE-SU-2016:2458-1

SUSE-SU-2016:2468-1

SUSE-SU-2016:2469-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

USN-3087-1

USN-3087-2

Affected Products

Alt Linux

Centos

Fortios

Freebsd

Huawei Vrp

Ibm Aix

Junos

Nessus

Openssl

Red Hat

Suse

Ubuntu

References · 319

• https://ubuntu.com/security/CVE-2016-6306 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179 · Security Note
• https://ubuntu.com/security/CVE-2016-2181 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2186 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2182 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02405 · Security Note
• https://access.redhat.com/errata/RHSA-2018:2185 · Vendor Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-16:26.openssl.asc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6302 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02462 · Security Note
• http://oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html · Patch
• https://bdu.fstec.ru/vul/2016-02168 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180 · Security Note
• https://bdu.fstec.ru/vul/2020-02910 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:2468-1 · Vendor Advisory