Alpine: libcrypto3, multiple openssl packages: security update to 1.0.1-r0 (deprecated)

medium Tenable Cloud Security Plugin ID 401149

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k
accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify
message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS
Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.
(CVE-2015-0205)

- The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly
handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service
(NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3
handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the
CVE-2014-3568 fix. (CVE-2014-3569)

- The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not
properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat
cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl,
crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c. (CVE-2014-3570)

- OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a
denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is
processed with a different read operation for the handshake header than for the handshake body, related to
the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c. (CVE-2014-3571)

- The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1
before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of
forward secrecy by omitting the ServerKeyExchange message. (CVE-2014-3572)

Plugin Details

Severity: Medium

ID: 401149

Version: Revision 1.26

Type: Local

Family: Alpine Linux Local Security Checks

Published: 8/16/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2015-0205

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2015-0204

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/9/2015

Vulnerability Publication Date: 10/17/2014

Reference Information

CVE: CVE-2014-3569, CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-0204, CVE-2015-0205, CVE-2015-0206

BID: 71934, 71935, 71936, 71937, 71939, 71940, 71941, 71942

IAVA: 2015-A-0005-S, 2015-A-0063-S

Detections

Analytics