Security fix for CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues :

  - CVE-2016-2108: Memory corruption in the ASN.1 encoder     (bsc#977617)

  - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check     (bsc#977616)

  - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)

  - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)

  - CVE-2016-2109: ASN.1 BIO excessive memory allocation     (bsc#976942)

  - bsc#976943: Buffer overrun in ASN1_parse

  - bsc#977621: Preserve negotiated digests for SNI     (bsc#977621)

  - bsc#958501: Fix openssl enc -non-fips-allow option in     FIPS mode (bsc#958501)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0996 advisory.

    - fix CVE-2016-2105 - possible overflow in base64 encoding
    - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
    - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
    - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
    - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
    - fix CVE-2016-0799 - memory issues in BIO_printf
    - fix CVE-2016-0702 - side channel attack on modular exponentiation
    - fix CVE-2016-0705 - double-free in DSA private key parsing
    - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn
    - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
    - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2
    - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
    - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - A flaw was found in the way OpenSSL encoded certain     ASN.1 data structures. An attacker could use this flaw     to create a specially crafted certificate which, when     verified or re-encoded by OpenSSL, could cause it to     crash, or execute arbitrary code using the permissions     of the user running an application compiled against the     OpenSSL library. (CVE-2016-2108)

  - Two integer overflow flaws, leading to buffer overflows,     were found in the way the EVP_EncodeUpdate() and     EVP_EncryptUpdate() functions of OpenSSL parsed very     large amounts of input data. A remote attacker could use     these flaws to crash an application using OpenSSL or,     possibly, execute arbitrary code with the permissions of     the user running that application. (CVE-2016-2105,     CVE-2016-2106)

  - It was discovered that OpenSSL leaked timing information     when decrypting TLS/SSL and DTLS protocol encrypted     records when the connection used the AES CBC cipher     suite and the server supported AES-NI. A remote attacker     could possibly use this flaw to retrieve plain text from     encrypted packets by using a TLS/SSL or DTLS server as a     padding oracle. (CVE-2016-2107)

  - Several flaws were found in the way BIO_*printf     functions were implemented in OpenSSL. Applications     which passed large amounts of untrusted data through     these functions could crash or potentially execute code     with the permissions of the user running such an     application. (CVE-2016-0799, CVE-2016-2842)

  - A denial of service flaw was found in the way OpenSSL     parsed certain ASN.1-encoded data from BIO (OpenSSL's     I/O abstraction) inputs. An application using OpenSSL     that accepts untrusted ASN.1 BIO input could be forced     to allocate an excessive amount of data. (CVE-2016-2109)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-2177 - possible integer overflow

  - fix CVE-2016-2178 - non-constant time DSA operations

  - fix CVE-2016-2179 - further DoS issues in DTLS

  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio

  - fix CVE-2016-2181 - DTLS1 replay protection and     unprocessed records issue

  - fix CVE-2016-2182 - possible buffer overflow in     BN_bn2dec

  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC     length check

  - fix CVE-2016-6304 - unbound memory growth with OCSP     status request

  - fix CVE-2016-6306 - certificate message OOB reads

  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers     and RC4 to 112 bit effective strength

  - replace expired testing certificates

  - fix CVE-2016-2105 - possible overflow in base64 encoding

  - fix CVE-2016-2106 - possible overflow in     EVP_EncryptUpdate

  - fix CVE-2016-2107 - padding oracle in stitched AES-NI     CBC-MAC

  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder

  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data     from BIO

  - fix CVE-2016-0799 - memory issues in BIO_printf

According to its banner, the version of OpenSSL on the remote host is 1.0.1 prior to 1.0.1t, or 1.0.2 prior to 1.0.2h. It is therefore affected by the following vulnerabilities :

 - A flaw exists in 'crypto/asn1/a_d2i_fp.c', which is triggered during the handling of large length fields in ASN.1 BIO. This may allow a remote attacker to exhaust memory resources, potentially crashing a process linked against the library.
 - A flaw exists in the 'aesni_cbc_hmac_sha1_cipher()' function in 'crypto/evp/e_aes_cbc_hmac_sha1.c' and 'aesni_cbc_hmac_sha256_cipher()' function in 'crypto/evp/e_aes_cbc_hmac_sha256.c'. The issue is triggered when a connection uses an AES CBC cipher and AES-NI is supported by the server. This may allow a MitM (Man-in-the-Middle) attacker to conduct a padding oracle attack to potentially decrypt traffic.
 - A flaw in the 'X509_NAME_oneline()' function in 'crypto/x509/x509_obj.c' that is triggered when handling overly long ASN1 strings. This may allow a remote attacker to potentially disclose arbitrary stack memory contents.
 - An overflow condition in the 'EVP_EncryptUpdate()' function in 'crypto/evp/evp_enc.c' is triggered when handling a large amount of input data after a previous call to the same function with a partial block. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially resulting in the execution of arbitrary code.
 - An overflow condition in the 'EVP_EncodeUpdate()' function in 'crypto/evp/encode.c' is triggered when handling a large amount of input data. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially resulting in the execution of arbitrary code.

Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	Name	Product	Family	Published	Updated	Severity
90898	Fedora 23 : openssl-1.0.2h-1.fc23 (2016-05c567df1a)	Nessus	Fedora Local Security Checks	5/5/2016	1/11/2021	critical
90934	openSUSE Security Update : openssl (openSUSE-2016-564)	Nessus	SuSE Local Security Checks	5/6/2016	1/19/2021	critical
91058	Fedora 22 : openssl-1.0.1k-15.fc22 (2016-1e39d934ed)	Nessus	Fedora Local Security Checks	5/12/2016	1/11/2021	critical
91152	Oracle Linux 6 : openssl (ELSA-2016-0996)	Nessus	Oracle Linux Local Security Checks	5/16/2016	10/22/2024	critical
91541	Scientific Linux Security Update : openssl on SL6.x i386/x86_64 (20160510)	Nessus	Scientific Linux Local Security Checks	6/9/2016	1/14/2021	critical
93761	OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0135)	Nessus	OracleVM Local Security Checks	9/28/2016	1/4/2021	critical
9390	OpenSSL 1.0.1 < 1.0.1t / 1.0.2 < 1.0.2h Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	7/8/2016	3/6/2019	high
503100	Siemens SCALANCE X-200RNA Switch Devices Integer Overflow or Wraparound (CVE-2016-2106)	Tenable OT Security	Tenable.ot	3/13/2025	3/13/2025	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

high

high