Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in openssl-1.0.1e-25.el7 in Red Hat Enterprise Linux (RHEL) 7 and other products, allows remote attackers to cause a denial of service (application crash) by establishing many TLS sessions to a multithreaded server, leading to use of a negative value for a certain length field.

OpenSSL 0.9.8j was updated to fix several security issues.

CVE-2015-4000: The Logjam Attack ( weakdh.org ) has been addressed by rejecting connections with DH parameters shorter than 1024 bits. We now also generate 2048-bit DH parameters by default.

CVE-2015-1788: Malformed ECParameters could cause an infinite loop.

CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.

CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent was fixed.

CVE-2015-1792: A CMS verification infinite loop when using an unknown hash function was fixed.

CVE-2015-1791: Fixed a race condition in NewSessionTicket creation.

CVE-2015-3216: Fixed a potential crash in ssleay_rand_bytes due to locking regression.

fixed a timing side channel in RSA decryption (bnc#929678)

Additional changes :

In the default SSL cipher string EXPORT ciphers are now disabled. This will only get active if applications get rebuilt and actually use this string. (bnc#931698)

Added the ECC ciphersuites to the DEFAULT cipher class (bnc#879179)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

OpenSSL 0.9.8k was updated to fix several security issues :

CVE-2015-4000: The Logjam Attack (weakdh.org) has been addressed by rejecting connections with DH parameters shorter than 1024 bits.
2048-bit DH parameters are now generated by default.

CVE-2015-1788: Malformed ECParameters could cause an infinite loop.

CVE-2015-1789: An out-of-bounds read in X509_cmp_time was fixed.

CVE-2015-1790: A PKCS7 decoder crash with missing EnvelopedContent was fixed.

CVE-2015-1792: A CMS verification infinite loop when using an unknown hash function was fixed.

CVE-2015-1791: Fixed a race condition in NewSessionTicket creation.

CVE-2015-3216: Fixed a potential crash in ssleay_rand_bytes due to locking regression.

Fixed a timing side channel in RSA decryption. (bsc#929678)

Additional changes :

In the default SSL cipher string EXPORT ciphers are now disabled. This will only get active if applications get rebuilt and actually use this string. (bsc#931698)

Added the ECC ciphersuites to the DEFAULT cipher class. (bsc#879179)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes the following security issues :

  - CVE-2015-4000 (boo#931698)

  - The Logjam Attack / weakdh.org

  - reject connections with DH parameters shorter than 1024     bits

  - generates 2048-bit DH parameters by default

  - CVE-2015-1788 (boo#934487)

  - Malformed ECParameters causes infinite loop

  - CVE-2015-1789 (boo#934489)

  - Exploitable out-of-bounds read in X509_cmp_time

  - CVE-2015-1790 (boo#934491)

  - PKCS7 crash with missing EnvelopedContent

  - CVE-2015-1792 (boo#934493)

  - CMS verify infinite loop with unknown hash function

  - CVE-2015-1791 (boo#933911)

  - race condition in NewSessionTicket

  - CVE-2015-3216 (boo#933898)

  - Crash in ssleay_rand_bytes due to locking regression

  - modified openssl-1.0.1i-fipslocking.patch

  - fix timing side channel in RSA decryption (bnc#929678)

  - add ECC ciphersuites to DEFAULT (bnc#879179)

  - Disable EXPORT ciphers by default (bnc#931698, comment     #3)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update of openssl fixes the following security issues :

  - CVE-2015-4000 (bsc#931698)

  - The Logjam Attack / weakdh.org

  - reject connections with DH parameters shorter than 1024     bits

  - generates 2048-bit DH parameters by default

  - CVE-2015-1788 (bsc#934487)

  - Malformed ECParameters causes infinite loop

  - CVE-2015-1789 (bsc#934489)

  - Exploitable out-of-bounds read in X509_cmp_time

  - CVE-2015-1790 (bsc#934491)

  - PKCS7 crash with missing EnvelopedContent

  - CVE-2015-1792 (bsc#934493)

  - CMS verify infinite loop with unknown hash function

  - CVE-2015-1791 (bsc#933911)

  - race condition in NewSessionTicket

  - CVE-2015-3216 (bsc#933898)

  - Crash in ssleay_rand_bytes due to locking regression

  - fix a timing side channel in RSA decryption (bnc#929678)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

openssl was updated to fix six security issues.

The following vulnerabilities were fixed :

  - CVE-2015-4000: The Logjam Attack / weakdh.org. Rject     connections with DH parameters shorter than 768 bits,     generates 2048-bit DH parameters by default.
    (boo#931698)

  - CVE-2015-1788: Malformed ECParameters causes infinite     loop (boo#934487)

  - CVE-2015-1789: Exploitable out-of-bounds read in     X509_cmp_time (boo#934489)

  - CVE-2015-1790: PKCS7 crash with missing EnvelopedContent     (boo#934491)

  - CVE-2015-1792: CMS verify infinite loop with unknown     hash function (boo#934493)

  - CVE-2015-1791: race condition in NewSessionTicket     (boo#933911)

  - CVE-2015-3216: Crash in ssleay_rand_bytes due to locking     regression (boo#933898)

LOGJAM: A flaw was found in the way the TLS protocol composes the Diffie-Hellman exchange (for both export and non-export grade cipher suites). An attacker could use this flaw to downgrade a DHE connection to use export-grade key sizes, which could then be broken by sufficient pre-computation. This can lead to a passive man-in-the-middle attack in which the attacker is able to decrypt all traffic. (CVE-2015-4000)

An out-of-bounds read flaw was found in the X509_cmp_time() function of OpenSSL, which is used to test the expiry dates of SSL/TLS certificates. An attacker could possibly use a specially crafted SSL/TLS certificate or CRL (Certificate Revocation List), which when parsed by an application would cause that application to crash.
(CVE-2015-1789)

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 inputs. An attacker able to make an application using OpenSSL verify, decrypt, or parse a specially crafted PKCS#7 input could cause that application to crash. TLS/SSL clients and servers using OpenSSL were not affected by this flaw. (CVE-2015-1790)

A race condition was found in the session handling code of OpenSSL. An attacker could cause a multi-threaded SSL/TLS server to crash.
(CVE-2015-1791)

A denial of service flaw was found in OpenSSL in the way it verified certain signed messages using CMS (Cryptographic Message Syntax). A remote attacker could cause an application using OpenSSL to use excessive amounts of memory by sending a specially crafted message for verification. (CVE-2015-1792)

An invalid-free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could send a specially crafted message to the peer, which could cause the application to crash or potentially cause arbitrary code execution.
(CVE-2014-8176)

A regression was found in the ssleay_rand_bytes() function. This could lead a multi-threaded application to crash. (CVE-2015-3216)

An invalid free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could cause a DTLS server or client using OpenSSL to crash or, potentially, execute arbitrary code. (CVE-2014-8176)

A flaw was found in the way the OpenSSL packages shipped with Scientific Linux 6 and 7 performed locking in the ssleay_rand_bytes() function. This issue could possibly cause a multi-threaded application using OpenSSL to perform an out-of-bounds read and crash.
(CVE-2015-3216)

An out-of-bounds read flaw was found in the X509_cmp_time() function of OpenSSL. A specially crafted X.509 certificate or a Certificate Revocation List (CRL) could possibly cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2015-1789)

A race condition was found in the session handling code of OpenSSL.
This issue could possibly cause a multi-threaded TLS/SSL client using OpenSSL to double free session ticket data and crash. (CVE-2015-1791)

A flaw was found in the way OpenSSL handled Cryptographic Message Syntax (CMS) messages. A CMS message with an unknown hash function identifier could cause an application using OpenSSL to enter an infinite loop. (CVE-2015-1792)

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 inputs. A specially crafted PKCS#7 input with missing EncryptedContent data could cause an application using OpenSSL to crash. (CVE-2015-1790)

For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, as well as a full-strength, general purpose cryptography library.

An invalid free flaw was found in the way OpenSSL handled certain DTLS handshake messages. A malicious DTLS client or server could cause a DTLS server or client using OpenSSL to crash or, potentially, execute arbitrary code. (CVE-2014-8176)

A flaw was found in the way the OpenSSL packages shipped with Red Hat Enterprise Linux 6 and 7 performed locking in the ssleay_rand_bytes() function. This issue could possibly cause a multi-threaded application using OpenSSL to perform an out-of-bounds read and crash.
(CVE-2015-3216)

An out-of-bounds read flaw was found in the X509_cmp_time() function of OpenSSL. A specially crafted X.509 certificate or a Certificate Revocation List (CRL) could possibly cause a TLS/SSL server or client using OpenSSL to crash. (CVE-2015-1789)

A race condition was found in the session handling code of OpenSSL.
This issue could possibly cause a multi-threaded TLS/SSL client using OpenSSL to double free session ticket data and crash. (CVE-2015-1791)

A flaw was found in the way OpenSSL handled Cryptographic Message Syntax (CMS) messages. A CMS message with an unknown hash function identifier could cause an application using OpenSSL to enter an infinite loop. (CVE-2015-1792)

A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 inputs. A specially crafted PKCS#7 input with missing EncryptedContent data could cause an application using OpenSSL to crash. (CVE-2015-1790)

Red Hat would like to thank the OpenSSL project for reporting CVE-2014-8176, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791 and CVE-2015-1792 flaws. Upstream acknowledges Praveen Kariyanahalli and Ivan Fratric as the original reporters of CVE-2014-8176, Robert Swiecki and Hanno Bock as the original reporters of CVE-2015-1789, Michal Zalewski as the original reporter of CVE-2015-1790, Emilia Kasper as the original report of CVE-2015-1791 and Johannes Bauer as the original reporter of CVE-2015-1792.

All openssl users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - improved fix for (CVE-2015-1791)

  - add missing parts of CVE-2015-0209 fix for corectness     although unexploitable

  - fix CVE-2014-8176 - invalid free in DTLS buffering code

  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time

  - fix CVE-2015-1790 - PKCS7 crash with missing     EncryptedContent

  - fix CVE-2015-1791 - race condition handling     NewSessionTicket

  - fix CVE-2015-1792 - CMS verify infinite loop with     unknown hash function

  - fix CVE-2015-3216 - regression in RAND locking that can     cause segfaults on read in multithreaded applications

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1115 advisory.

    - improved fix for CVE-2015-1791
    - add missing parts of CVE-2015-0209 fix for corectness although unexploitable
    - fix CVE-2014-8176 - invalid free in DTLS buffering code
    - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
    - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
    - fix CVE-2015-1791 - race condition handling NewSessionTicket
    - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
84561	SUSE SLES11 Security Update : OpenSSL (SUSE-SU-2015:1184-2) (Logjam)	Nessus	SuSE Local Security Checks	high
84559	SUSE SLED11 / SLES11 Security Update : OpenSSL (SUSE-SU-2015:1182-2) (Logjam)	Nessus	SuSE Local Security Checks	high
84548	SUSE SLES11 Security Update : OpenSSL (SUSE-SU-2015:1184-1) (Logjam)	Nessus	SuSE Local Security Checks	high
84442	SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2015:1150-1) (Logjam)	Nessus	SuSE Local Security Checks	high
84426	SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2015:1143-1) (Logjam)	Nessus	SuSE Local Security Checks	high
84414	openSUSE Security Update : openssl (openSUSE-2015-447) (Logjam)	Nessus	SuSE Local Security Checks	high
84251	Amazon Linux AMI : openssl (ALAS-2015-550) (Logjam)	Nessus	Amazon Linux Local Security Checks	high
84226	Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20150615)	Nessus	Scientific Linux Local Security Checks	high
84204	RHEL 6 / 7 : openssl (RHSA-2015:1115)	Nessus	Red Hat Local Security Checks	high
84203	OracleVM 3.3 : openssl (OVMSA-2015-0070)	Nessus	OracleVM Local Security Checks	high
84202	Oracle Linux 6 / 7 : openssl (ELSA-2015-1115)	Nessus	Oracle Linux Local Security Checks	high
84199	CentOS 6 / 7 : openssl (CESA-2015:1115)	Nessus	CentOS Local Security Checks	high

Detections

Analytics

CVE-2015-3216

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high