CVE-2016-0799
OpenSSL: Fix memory issues in BIO_*printf functions
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Amazon (alta), Oracle (alta), Red Hat (baja), Ubuntu (baja).
Descripción
The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | openssl, openssl-debuginfo, openssl-devel y 2 más | 1:1.0.1k-14.89.amzn1 |
| debian 11 | openssl | 1.0.2g-1 |
| debian 12 | openssl | 1.0.2g-1 |
| debian 13 | openssl | 1.0.2g-1 |
| debian 14 | openssl | 1.0.2g-1 |
| debian 7 | openssl | 1.0.1e-2+deb7u20 |
| debian 8 | openssl | 1.0.1k-3+deb8u4 |
| echo | openssl | 1.0.2g-1 |
| Oracle Linux 5 | openssl, openssl-devel, openssl-perl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 6 | openssl, openssl-devel, openssl-fips y 5 más | 1.0.1e-48.el6_8.1 y 1 más |
| Oracle Linux 7 | openssl, openssl-devel, openssl-libs y 2 más | 1:1.0.1e-51.el7_2.5 |
| Red Hat | openssl098e | sin corrección indicada |
Mostrar las 46 entradas de 28 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| amazon linux 1 | openssl | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-debuginfo | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-devel | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-perl | 1:1.0.1k-14.89.amzn1 |
| amazon linux 1 | openssl-static | 1:1.0.1k-14.89.amzn1 |
| debian 11 | openssl | 1.0.2g-1 |
| debian 12 | openssl | 1.0.2g-1 |
| debian 13 | openssl | 1.0.2g-1 |
| debian 14 | openssl | 1.0.2g-1 |
| debian 7 | openssl | 1.0.1e-2+deb7u20 |
| debian 8 | openssl | 1.0.1k-3+deb8u4 |
| echo | openssl | 1.0.2g-1 |
| Oracle Linux 5 | openssl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 5 | openssl-devel | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 5 | openssl-perl | 0.9.8e-40.0.2.el5_11 |
| Oracle Linux 6 | openssl | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-devel | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-fips | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-devel | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-perl | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-fips-static | 1.0.1t-2.0.1.el6 |
| Oracle Linux 6 | openssl-perl | 1.0.1e-48.el6_8.1 |
| Oracle Linux 6 | openssl-static | 1.0.1e-48.el6_8.1 |
| Oracle Linux 7 | openssl | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-devel | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-libs | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-perl | 1:1.0.1e-51.el7_2.5 |
| Oracle Linux 7 | openssl-static | 1:1.0.1e-51.el7_2.5 |
| Red Hat | openssl098e | sin corrección indicada |
| root.io debian 11 | rootio-openssl | 1.0.2g-1 |
| root.io debian 12 | rootio-openssl | 1.0.2g-1 |
| seal Red Hat 6 | openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| seal Red Hat 6 | seal-openssl | 1.0.1e-59.el6_10+sp999, 1.0.1e-61.el6_10+sp999 |
| ubuntu 12.04 | openssl | 1.0.1-4ubuntu5.35 |
| ubuntu 14.04 | openssl | 1.0.1f-1ubuntu2.18 |
| ubuntu 14.04-ESM | openssl | 1.0.1f-1ubuntu2.18 |
| ubuntu 15.10 | openssl | 1.0.2d-0ubuntu1.4 |
| ubuntu 16.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 16.04-ESM | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 16.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 17.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 17.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.04 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.04-ESM | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 18.10 | openssl | 1.0.2g-1ubuntu2 |
| ubuntu 19.04 | openssl | 1.0.2g-1ubuntu2 |
Referencias
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html
Las 66 referencias
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html
- http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html
- http://marc.info/?l=bugtraq&m=145983526810210&w=2
- http://marc.info/?l=bugtraq&m=146108058503441&w=2
- http://openssl.org/news/secadv/20160301.txt
- http://rhn.redhat.com/errata/RHSA-2016-0722.html
- http://rhn.redhat.com/errata/RHSA-2016-0996.html
- http://rhn.redhat.com/errata/RHSA-2016-2073.html
- http://rhn.redhat.com/errata/RHSA-2016-2957.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl
- http://www.debian.org/security/2016/dsa-3500
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://www.securityfocus.com/bid/83755
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1035133
- http://www.ubuntu.com/usn/USN-2914-1
- https://access.redhat.com/security/cve/CVE-2016-0799
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73
- https://guidovranken.wordpress.com/2016/02/27/openssl-cve-2016-0799-heap-corruption-via-bio_printf/
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168
- https://linux.oracle.com/cve/CVE-2016-0799.html
- https://linux.oracle.com/errata/ELSA-2016-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-0799
- https://security.freebsd.org/advisories/FreeBSD-SA-16:12.openssl.asc
- https://security.gentoo.org/glsa/201603-15
- https://ubuntu.com/security/notices/USN-2914-1
- https://www.cve.org/CVERecord?id=CVE-2016-0799
- https://www.openssl.org/news/secadv/20160301.txt