Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit.

  - CVE-2016-2105     Guido Vranken discovered that an overflow can occur in     the function EVP_EncodeUpdate(), used for Base64     encoding, if an attacker can supply a large amount of     data. This could lead to a heap corruption.

  - CVE-2016-2106     Guido Vranken discovered that an overflow can occur in     the function EVP_EncryptUpdate() if an attacker can     supply a large amount of data. This could lead to a heap     corruption.

  - CVE-2016-2107     Juraj Somorovsky discovered a padding oracle in the AES     CBC cipher implementation based on the AES-NI     instruction set. This could allow an attacker to decrypt     TLS traffic encrypted with one of the cipher suites     based on AES CBC.

  - CVE-2016-2108     David Benjamin from Google discovered that two separate     bugs in the ASN.1 encoder, related to handling of     negative zero integer values and large universal tags,     could lead to an out-of-bounds write.

  - CVE-2016-2109     Brian Carpenter discovered that when ASN.1 data is read     from a BIO using functions such as d2i_CMS_bio(), a     short invalid encoding can cause allocation of large     amounts of memory potentially consuming excessive     resources or exhausting memory.

Additional information about these issues can be found in the OpenSSL security advisory at https://www.openssl.org/news/secadv/20160503.txt

Security fix for CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues :

  - CVE-2016-2108: Memory corruption in the ASN.1 encoder     (bsc#977617)

  - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check     (bsc#977616)

  - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)

  - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)

  - CVE-2016-2109: ASN.1 BIO excessive memory allocation     (bsc#976942)

  - bsc#976943: Buffer overrun in ASN1_parse

  - bsc#977621: Preserve negotiated digests for SNI     (bsc#977621)

  - bsc#958501: Fix openssl enc -non-fips-allow option in     FIPS mode (bsc#958501)

This update was imported from the SUSE:SLE-12-SP1:Update update project.

From Red Hat Security Advisory 2016:0996 :

An update for openssl is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es) :

* A flaw was found in the way OpenSSL encoded certain ASN.1 data structures. An attacker could use this flaw to create a specially crafted certificate which, when verified or re-encoded by OpenSSL, could cause it to crash, or execute arbitrary code using the permissions of the user running an application compiled against the OpenSSL library. (CVE-2016-2108)

* Two integer overflow flaws, leading to buffer overflows, were found in the way the EVP_EncodeUpdate() and EVP_EncryptUpdate() functions of OpenSSL parsed very large amounts of input data. A remote attacker could use these flaws to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of the user running that application. (CVE-2016-2105, CVE-2016-2106)

* It was discovered that OpenSSL leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when the connection used the AES CBC cipher suite and the server supported AES-NI. A remote attacker could possibly use this flaw to retrieve plain text from encrypted packets by using a TLS/SSL or DTLS server as a padding oracle. (CVE-2016-2107)

* Several flaws were found in the way BIO_*printf functions were implemented in OpenSSL. Applications which passed large amounts of untrusted data through these functions could crash or potentially execute code with the permissions of the user running such an application. (CVE-2016-0799, CVE-2016-2842)

* A denial of service flaw was found in the way OpenSSL parsed certain ASN.1-encoded data from BIO (OpenSSL's I/O abstraction) inputs. An application using OpenSSL that accepts untrusted ASN.1 BIO input could be forced to allocate an excessive amount of data. (CVE-2016-2109)

Red Hat would like to thank the OpenSSL project for reporting CVE-2016-2108, CVE-2016-2842, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, and CVE-2016-0799. Upstream acknowledges Huzaifa Sidhpurwala (Red Hat), Hanno Bock, and David Benjamin (Google) as the original reporters of CVE-2016-2108; Guido Vranken as the original reporter of CVE-2016-2842, CVE-2016-2105, CVE-2016-2106, and CVE-2016-0799; and Juraj Somorovsky as the original reporter of CVE-2016-2107.

The version of Citrix XenServer running on the remote host is affected by multiple vulnerabilities in the bundled versions of OpenSSL and QEMU :

  - Multiple flaws exist in the bundled version of OpenSSL     in the aesni_cbc_hmac_sha1_cipher() and     aesni_cbc_hmac_sha256_cipher() functions that are     triggered when the connection uses an AES-CBC cipher and     AES-NI is supported by the server. A man-in-the-middle     attacker can exploit these issues to conduct a padding     oracle attack, resulting in the ability to decrypt the     network traffic. (CVE-2016-2107)

  - A remote code execution vulnerability exists in the     bundled version of OpenSSL in the ASN.1 encoder     component due to an underflow condition that occurs when     attempting to encode the value zero represented as a     negative integer. An unauthenticated, remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-2108)

  - An out-of-bounds write error exists in the bundled     version of QEMU in the vga_update_memory_access()     function that is triggered when access nodes are changed     after the register bank has been set. An attacker on the     guest can exploit this to execute arbitrary code with     the privileges of the host's QEMU process.
    (CVE-2016-3710)

  - An integer overflow condition exists in the bundled     version of QEMU in the vbe_update_vgaregs() function     that is triggered when setting certain VGA registers     while in VBE mode. An attacker on the guest can     exploit this to crash the host's QEMU process.
    (CVE-2016-3712)

Security Fix(es) :

  - A flaw was found in the way OpenSSL encoded certain     ASN.1 data structures. An attacker could use this flaw     to create a specially crafted certificate which, when     verified or re-encoded by OpenSSL, could cause it to     crash, or execute arbitrary code using the permissions     of the user running an application compiled against the     OpenSSL library. (CVE-2016-2108)

  - Two integer overflow flaws, leading to buffer overflows,     were found in the way the EVP_EncodeUpdate() and     EVP_EncryptUpdate() functions of OpenSSL parsed very     large amounts of input data. A remote attacker could use     these flaws to crash an application using OpenSSL or,     possibly, execute arbitrary code with the permissions of     the user running that application. (CVE-2016-2105,     CVE-2016-2106)

  - It was discovered that OpenSSL leaked timing information     when decrypting TLS/SSL and DTLS protocol encrypted     records when the connection used the AES CBC cipher     suite and the server supported AES-NI. A remote attacker     could possibly use this flaw to retrieve plain text from     encrypted packets by using a TLS/SSL or DTLS server as a     padding oracle. (CVE-2016-2107)

  - Several flaws were found in the way BIO_*printf     functions were implemented in OpenSSL. Applications     which passed large amounts of untrusted data through     these functions could crash or potentially execute code     with the permissions of the user running such an     application. (CVE-2016-0799, CVE-2016-2842)

  - A denial of service flaw was found in the way OpenSSL     parsed certain ASN.1-encoded data from BIO (OpenSSL's     I/O abstraction) inputs. An application using OpenSSL     that accepts untrusted ASN.1 BIO input could be forced     to allocate an excessive amount of data. (CVE-2016-2109)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix CVE-2016-2177 - possible integer overflow

  - fix CVE-2016-2178 - non-constant time DSA operations

  - fix CVE-2016-2179 - further DoS issues in DTLS

  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio

  - fix CVE-2016-2181 - DTLS1 replay protection and     unprocessed records issue

  - fix CVE-2016-2182 - possible buffer overflow in     BN_bn2dec

  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC     length check

  - fix CVE-2016-6304 - unbound memory growth with OCSP     status request

  - fix CVE-2016-6306 - certificate message OOB reads

  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers     and RC4 to 112 bit effective strength

  - replace expired testing certificates

  - fix CVE-2016-2105 - possible overflow in base64 encoding

  - fix CVE-2016-2106 - possible overflow in     EVP_EncryptUpdate

  - fix CVE-2016-2107 - padding oracle in stitched AES-NI     CBC-MAC

  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder

  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data     from BIO

  - fix CVE-2016-0799 - memory issues in BIO_printf

This update for compat-openssl098 fixes the following issues :

  - CVE-2016-2108: Memory corruption in the ASN.1 encoder     (bsc#977617)

  - CVE-2016-2105: EVP_EncodeUpdate overflow (bsc#977614)

  - CVE-2016-2106: EVP_EncryptUpdate overflow (bsc#977615)

  - CVE-2016-2109: ASN.1 BIO excessive memory allocation     (bsc#976942)

  - CVE-2016-0702: Side channel attack on modular     exponentiation 'CacheBleed' (bsc#968050)

  - bsc#976943: Buffer overrun in ASN1_parse

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed :

  - CVE-2016-7056: A local ECSDA P-256 timing attack that     might have allowed key recovery was fixed (bsc#1019334)

  - CVE-2016-8610: A remote denial of service in SSL alert     handling was fixed (bsc#1005878)

  - CVE-2016-2108: Added a missing commit for CVE-2016-2108,     fixing the negative zero handling in the ASN.1 decoder     (bsc#1004499)

  - CVE-2017-3731: Truncated packet could crash via OOB read     (bsc#1022085, CVE-2017-3731)

  - Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)     Bugs fixed :

  - fix crash in openssl speed (bsc#1000677)

  - fix ca-bundle path (bsc#1022271)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of OpenSSL on the remote host is 1.0.1 prior to 1.0.1o, or 1.0.2 prior to 1.0.2c. It is therefore affected by an underflow condition in the ASN.1 encoder that is triggered when attempting to encode the value zero represented as a negative integer. This may allow a remote attacker to corrupt memory and potentially execute arbitrary code.

ID	Name	Product	Family	Published	Updated	Severity
90896	Debian DSA-3566-1 : openssl - security update	Nessus	Debian Local Security Checks	5/5/2016	1/11/2021	critical
90898	Fedora 23 : openssl-1.0.2h-1.fc23 (2016-05c567df1a)	Nessus	Fedora Local Security Checks	5/5/2016	1/11/2021	critical
90934	openSUSE Security Update : openssl (openSUSE-2016-564)	Nessus	SuSE Local Security Checks	5/6/2016	1/19/2021	critical
91058	Fedora 22 : openssl-1.0.1k-15.fc22 (2016-1e39d934ed)	Nessus	Fedora Local Security Checks	5/12/2016	1/11/2021	critical
91152	Oracle Linux 6 : openssl (ELSA-2016-0996)	Nessus	Oracle Linux Local Security Checks	5/16/2016	1/14/2021	critical
91352	Citrix XenServer Multiple Vulnerabilities (CTX212736)	Nessus	Misc.	5/27/2016	7/6/2018	critical
91541	Scientific Linux Security Update : openssl on SL6.x i386/x86_64 (20160510)	Nessus	Scientific Linux Local Security Checks	6/9/2016	1/14/2021	critical
93761	OracleVM 3.3 / 3.4 : openssl (OVMSA-2016-0135)	Nessus	OracleVM Local Security Checks	9/28/2016	1/4/2021	critical
91043	SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2016:1267-1)	Nessus	SuSE Local Security Checks	5/11/2016	1/6/2021	critical
97188	SUSE SLED12 / SLES12 Security Update : openssl (SUSE-SU-2017:0461-1)	Nessus	SuSE Local Security Checks	2/15/2017	1/6/2021	critical
9389	OpenSSL 1.0.1 < 1.0.1o / 1.0.2 < 1.0.2c ASN.1 Encoder Negative Zero Value Handling RCE	Nessus Network Monitor	Web Servers	7/8/2016	3/6/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical