SB2015031902 - Gentoo update for OpenSSL
Published: March 19, 2015 Updated: April 24, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 14 secuirty vulnerabilities.
1) Cryptographic issues (CVE-ID: CVE-2015-0204)
The vulnerability allows a remote attacker to gain access to modify data on the system.
The vulnerability exists due to remote SSL servers allowed to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the FREAK issue. A remote attacker can modify data on the system.
2) Input validation error (CVE-ID: CVE-2015-0286)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the affected device does not properly perform boolean-type comparisons within the ASN1_TYPE_cmp function in crypto/asn1/a_type.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
3) Buffer overflow (CVE-ID: CVE-2015-0287)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.
4) NULL pointer dereference (CVE-ID: CVE-2015-0288)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the X509_to_X509_REQ function in crypto/x509/x509_req.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
5) NULL pointer dereference (CVE-ID: CVE-2015-0289)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the PKCS#7 implementation. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
6) Buffer overflow (CVE-ID: CVE-2015-0292)
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to a boundary error in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation. A remote attacker can trigger memory corruption and perform a denial of service (DoS) attack or possibly have unspecified other impact.
7) Input validation error (CVE-ID: CVE-2015-0293)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the SSLv2 implementation. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
8) Use-after-free (CVE-ID: CVE-2015-0209)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c. A remote attacker can perform a denial of service (DoS) attack or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
9) NULL pointer dereference (CVE-ID: CVE-2015-0291)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the sigalgs implementation in t1_lib.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
10) NULL pointer dereference (CVE-ID: CVE-2015-0290)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the multi-block feature in the ssl3_write_bytes function in s3_pkt.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
11) Input validation error (CVE-ID: CVE-2015-0207)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the dtls1_listen function in d1_lib.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
12) NULL pointer dereference (CVE-ID: CVE-2015-0208)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
13) Input validation error (CVE-ID: CVE-2015-1787)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the ssl3_get_client_key_exchange function in s3_srvr.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
14) Cryptographic issues (CVE-ID: CVE-2015-0285)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the ssl3_client_hello function in s3_clnt.c does not ensure that the PRNG is seeded before proceeding with a handshak. A remote attacker can gain unauthorized access to sensitive information on the system.
Remediation
Install update from vendor's website.