OpenSSL - Multiple Vulnerabilities
Summary
DSA-3125-1: openssl - security update. Affects openssl versions < 1.0.1e-2+deb7u14. Fixed in 1.0.1e-2+deb7u14. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSL is a Secure Sockets Layer (SSL) toolkit that provides support for the Transport Layer Security (TLS) protocol. It is widely used for secure communication over networks and is implemented in various applications and systems. However, multiple vulnerabilities have been discovered in OpenSSL, which could potentially lead to security breaches and denial of service attacks.
Vulnerability Detail
The identified vulnerabilities in OpenSSL include:
-
CVE-2014-3569: This vulnerability allows for a NULL pointer dereference and daemon crash when OpenSSL is built with the no-ssl3 option and receives a SSL v3 ClientHello.
-
CVE-2014-3570: The bignum squaring (BN_sqr) in OpenSSL may produce incorrect results on certain platforms, making it easier for remote attackers to defeat cryptographic protection mechanisms.
-
CVE-2014-3571: A carefully crafted DTLS message can cause a segmentation fault in OpenSSL due to a NULL pointer dereference, leading to a denial of service attack.
-
CVE-2014-3572: An OpenSSL client can accept a handshake using an ephemeral ECDH ciphersuite if the server key exchange message is omitted, allowing for ECDHE-to-ECDH downgrade attacks and a loss of forward secrecy.
-
CVE-2014-8275: Various certificate fingerprint issues allow remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism.
-
CVE-2015-0204: An OpenSSL client accepts the use of an ephemeral RSA key in a non-export RSA key exchange ciphersuite, violating the TLS standard and enabling security downgrades.
-
CVE-2015-0205: An OpenSSL server accepts a DH certificate for client authentication without the certificate verify message, allowing clients to authenticate without a private key via crafted TLS handshake protocol traffic.
-
CVE-2015-0206: A memory leak in the dtls1_buffer_record function can be exploited by a remote attacker to mount a denial of service attack through memory exhaustion.
How To Fix
Minimum fixed version
1.0.1e-2+deb7u14
This is the first release that contains the fix.
sudo apt-get install --only-upgrade opensslTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workarounds have been mentioned for these vulnerabilities. It is advised to follow the recommended fix and upgrade the OpenSSL packages to the fixed versions.
Conclusion
OpenSSL is susceptible to multiple vulnerabilities that can have severe consequences for the security and integrity of systems using this toolkit. It is crucial to promptly upgrade the OpenSSL packages to the fixed versions mentioned in the advisory to mitigate the risks associated with these vulnerabilities. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for openssl →
FAQ
OpenSSL is a Secure Sockets Layer (SSL) toolkit that provides support for the Transport Layer Security (TLS) protocol. It is widely used for secure communication over networks.
These vulnerabilities could lead to security breaches, denial of service attacks, and the potential compromise of sensitive information.
To fix these vulnerabilities, it is recommended to upgrade the OpenSSL packages to the fixed versions mentioned in the advisory.
No specific workarounds have been mentioned for these vulnerabilities. It is advised to follow the recommended fix and upgrade the OpenSSL packages.
You can find more information about these vulnerabilities in the provided Common Vulnerabilities and Exposures (CVE) links and the official OpenSSL advisory.
Related vulnerabilities
Recent vulnerabilities recorded for openssl.
