Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-2110.

The remote Solaris system is missing necessary patches to address security updates :

  - The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c     in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1     before 1.0.1a does not properly interpret integer data,     which allows remote attackers to conduct buffer overflow     attacks, and cause a denial of service (memory     corruption) or possibly have unspecified other impact,     via crafted DER data, as demonstrated by an X.509     certificate or an RSA public key. (CVE-2012-2110)

  - Multiple integer signedness errors in     crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote     attackers to conduct buffer overflow attacks, and cause     a denial of service (memory corruption) or possibly have     unspecified other impact, via crafted DER data, as     demonstrated by an X.509 certificate or an RSA public     key. NOTE: this vulnerability exists because of an     incomplete fix for CVE-2012-2110. (CVE-2012-2131)

The version of OpenSSL running on the remote host is affected by the following vulnerabilities :

  - The implementation of Cryptographic Message Syntax (CMS)     and PKCS #7 in OpenSSL does not properly restrict     certain oracle behavior, which makes it easier for     context-dependent attackers to decrypt data via a     Million Message Attack (MMA) adaptive chosen ciphertext     attack. (CVE-2012-0884)

  - The mime_param_cmp function in crypto/asn1/asn_mime.c in     OpenSSL allows remote attackers to cause a denial of     service (NULL pointer dereference and application crash)     via a crafted S/MIME message, a different vulnerability     than CVE-2006-7250. (CVE-2012-1165)

  - The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c     in OpenSSL does not properly interpret integer data,     which allows remote attackers to conduct buffer overflow     attacks, and cause a denial of service (memory     corruption) or possibly have unspecified other impact,     via crafted DER data, as demonstrated by an X.509     certificate or an RSA public key. (CVE-2012-2110)

  - Multiple integer signedness errors in     crypto/buffer/buffer.c in OpenSSL allow remote attackers     to conduct buffer overflow attacks, and cause a denial     of service (memory corruption) or possibly have     unspecified other impact, via crafted DER data, as     demonstrated by an X.509 certificate or an RSA public     key. NOTE: this vulnerability exists because of an     incomplete fix for CVE-2012-2110. (CVE-2012-2131)

  - Integer underflow in OpenSSL when TLS 1.1, TLS 1.2, or     DTLS is used with CBC encryption, allows remote     attackers to cause a denial of service (buffer over-     read) or possibly have unspecified other impact via a     crafted TLS packet that is not properly handled during a     certain explicit IV calculation. (CVE-2012-2333)

According to its self-reported version, the version of IVE / UAC OS running on the remote host may be affected by multiple vulnerabilities :

  - Remote attackers may be able to trigger buffer overflow     vulnerabilities on the OpenSSL libraries by sending     specially crafted DER data, resulting in memory     corruption. (CVE-2012-2131)

  - A weakness in the OpenSSL library leaves it vulnerable     to an attack that could allow a third party to recover     (fully or partially) the plaintext from encrypted     traffic. (CVE-2013-0169)

  - A flaw in OCSP signature verification in the OpenSSL     library allows remote OCSP servers to cause a denial of     service condition with an invalid key. (CVE-2013-0166)

The remote host is running a version of Mac OS X 10.8 that is older than 10.8.4. The newer version contains numerous security-related fixes :

  - A local security-bypass vulnerability exists that affects the Disk Management component. The issue can be exploited by an unauthorized attacker to disable FileVault using the command-line. (CVE-2013-0985)

  - A security-bypass vulnerability in SMB file sharing can occur whereby an authenticated attacker can write files outside the shared directory. (CVE-2013-0990)

  - A remote buffer-overflow vulnerability exists when handling certain PICT images. (CVE-2013-0975)

  - A security-bypass vulnerability exists whereby an attacker with access to a user's session may be able to log into previously accessed sites. An attacker can exploit this issue even if Private Browsing was used. (CVE-2013-0982)

  - A remote-code execution issue affects the text glyphs because of an unbounded stack allocation when handling maliciously crafted URLs. (CVE-2013-0983)

  - A remote-code execution vulnerability exists due to improper handling of text tracks. (CVE-2013-1024)

  - A buffer-overflow vulnerability exists in the Directory Service daemon that can be exploited via a specially crafted network message. (CVE-2013-0984)

The remote host is running a version of Mac OS X 10.6 or 10.7 that does not have Security Update 2013-002 applied.  This update contains numerous security-related fixes for the following components :

  - CoreMedia Playback (10.7 only)
  - Directory Service (10.6 only)
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - Ruby (10.6 only)
  - SMB (10.7 only)

The remote host is running a version of Mac OS X 10.8.x that is prior to 10.8.4. The newer version contains multiple security-related fixes for the following components :

  - CFNetwork
  - CoreAnimation
  - CoreMedia Playback
  - CUPS
  - Disk Management
  - OpenSSL
  - QuickDraw Manager
  - QuickTime
  - SMB

This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption. (CVE-2012-2110)

Additionally, a check for negative buffer length values was added (CVE-2012-2131) and the stack made non-executable by marking the enhanced Intel SSSE3 assembler code as not needing executable stack.

This compat-openssl097g rollup update contains various security fixes :

  - incorrect integer conversions in OpenSSL could have     resulted in memory corruption during buffer management     operations. (CVE-2012-2131 / CVE-2012-2110)

According to its self-reported version number, the remote Junos router is using an outdated version of OpenSSL. Parsing malformed ASN.1 encoded data can result in memory corruption. This vulnerability can be triggered by attempting to parse untrusted data (e.g., an X.509 certificate).

This update of openssl fixes an integer conversation issue which could cause a heap-based memory corruption. (CVE-2012-2110)

Additionally, a check for negative buffer length values was added (CVE-2012-2131) and a memory leak when creating public keys fixed.

It was discovered that the fix for CVE-2012-2110 was incomplete for OpenSSL 0.9.8. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. Ubuntu 11.10 was not affected by this issue. (CVE-2012-2131)

The original upstream fix for CVE-2012-2110 would cause BUF_MEM_grow_clean() to sometimes return the wrong error condition.
This update fixes the problem.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the fix for CVE-2012-2110 (MDVSA-2012:060) was not sufficient to correct the issue for OpenSSL 0.9.8.

The updated packages have been upgraded to the 0.9.8w version which is not vulnerable to this issue.

According to its banner, the remote web server is running a version of OpenSSL earlier than 0.9.8w.  As such, the OpenSSL library itself is reportedly affected by a memory corruption vulnerability via an integer truncation error in the function 'asn1_d2i_read_bio' when reading ASN.1 DER format data. 

Applications using the 'BIO' or 'FILE' based functions (i.e., 'd2i_*_bio' or 'd2i_*_fp' functions) are affected by this issue.
Also affected are 'S/MIME' or 'CMS' applications using 'SMIME_read_PKCS7' or 'SMIME_read_CMS' parsers. The OpenSSL command line utility is affected if used to handle untrusted DER formatted data.

Note that the SSL/TLS code of OpenSSL is not affected.  Also not affected are applications using memory-based ASN.1 functions (e.g., 'd2i_X509', 'd2i_PKCS12', etc.) nor are applications using only PEM functions.

Note also that the original fix for CVE-2012-2110 in 0.9.8v was incomplete because the functions 'BUF_MEM_grow' and 'BUF_MEM_grow_clean', in file 'openssl/crypto/buffer/buffer.c', did not properly account for negative values of the argument 'len'.

Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues :

  - CVE-2012-0884     Ivan Nestlerode discovered a weakness in the CMS and     PKCS #7 implementations that could allow an attacker to     decrypt data via a Million Message Attack (MMA).

  - CVE-2012-1165     It was discovered that a NULL pointer could be     dereferenced when parsing certain S/MIME messages,     leading to denial of service.

  - CVE-2012-2110     Tavis Ormandy, Google Security Team, discovered a     vulnerability in the way DER-encoded ASN.1 data is     parsed that can result in a heap overflow.

Additionally, the fix for CVE-2011-4619 has been updated to address an issue with SGC handshakes.

Tomas Hoger, Red Hat, discovered that the fix for CVE-2012-2110 for the 0.9.8 series of OpenSSL was incomplete. It has been assigned the CVE-2012-2131 identifier.

ID	Name	Product	Family	Severity
80717	Oracle Solaris Third-Party Patch Update : openssl (multiple_vulnerabilities_in_openssl1)	Nessus	Solaris Local Security Checks	high
73562	AIX OpenSSL Advisory : openssl_advisory4.asc	Nessus	AIX Local Security Checks	high
69987	Junos Pulse Secure IVE / UAC OS Multiple SSL Vulnerabilities	Nessus	Misc.	high
801016	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	Log Correlation Engine	Operating System Detection	high
6857	Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)	Nessus Network Monitor	Web Clients	critical
66809	Mac OS X Multiple Vulnerabilities (Security Update 2013-002)	Nessus	MacOS X Local Security Checks	critical
66808	Mac OS X 10.8.x < 10.8.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
64184	SuSE 11.1 Security Update : openssl (SAT Patch Number 6245)	Nessus	SuSE Local Security Checks	high
64120	SuSE 11.2 Security Update : compat-openssl097g (SAT Patch Number 6749)	Nessus	SuSE Local Security Checks	high
62060	SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 8262)	Nessus	SuSE Local Security Checks	high
59989	Juniper Junos OpenSSL ASN.1 Memory Corruption (PSN-2012-07-645)	Nessus	Junos Local Security Checks	high
59237	SuSE 10 Security Update : openssl (ZYPP Patch Number 8112)	Nessus	SuSE Local Security Checks	high
58873	Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 : openssl vulnerability (USN-1428-1)	Nessus	Ubuntu Local Security Checks	high
58865	Mandriva Linux Security Advisory : openssl0.9.8 (MDVSA-2012:064)	Nessus	Mandriva Local Security Checks	high
58799	OpenSSL < 0.9.8w ASN.1 asn1_d2i_read_bio Memory Corruption	Nessus	Web Servers	high
58804	Debian DSA-2454-2 : openssl - multiple vulnerabilities	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2012-2131

critical

Tenable Plugins

high

high

high

high

critical

critical

high

high

high

high

high

high

high

high

high

high