PT-2020-7861 · Openssl · Libressl

Pascal Cuoq · Published 2020-01-23 · Updated 2024-06-15 · CVE-2015-5334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: LibreSSL versions prior to 2.3.1

Description: The issue is caused by an off-by-one error in the OBJ obj2txt function, which can be triggered by a crafted X.509 certificate. This can lead to a denial of service (program crash) or potentially allow the execution of arbitrary code via a stack-based buffer overflow.

Recommendations: For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted X.509 certificates to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2015-5334

OPENSUSE-SU-2024:10309-1

Affected Products

Libressl

References · 37

• 🔥 http://seclists.org/fulldisclosure/2015/Oct/75 · Exploit
• 🔥 http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-Leak-Overflow.html · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10309-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5334 · Security Note
• http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html · Note
• https://suse.com/security/cve/CVE-2015-1788 · Note
• https://suse.com/security/cve/CVE-2014-8176 · Note
• https://suse.com/security/cve/CVE-2014-3511 · Note
• https://suse.com/security/cve/CVE-2014-3510 · Note
• https://suse.com/security/cve/CVE-2014-5139 · Note
• https://suse.com/security/cve/CVE-2014-3508 · Note
• https://suse.com/security/cve/CVE-2014-3506 · Note
• https://suse.com/security/cve/CVE-2015-0287 · Note
• https://suse.com/security/cve/CVE-2015-0286 · Note