Уязвимость CVE-2014-3567: Информация

Описание

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

Важность: HIGH (7,1)

URL: https://nvd.nist.gov/vuln/detail/CVE-2014-3567
Опубликовано: 19 октября 2014 г.
Изменено: 7 ноября 2023 г.
Идентификатор типа ошибки: CWE-20, CWE-399

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
openssl10p91.0.1j-alt11.0.2u-alt1.p9.2ALT-PU-2014-2312-1133582Исправлено
openssl10c9f21.0.1j-alt11.0.2u-alt1.p9.1ALT-PU-2014-2312-1133582Исправлено
openssl10c71.0.1j-alt1.M70C.11.0.1u-alt0.M70C.1ALT-PU-2014-2316-1133754Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://www.openssl.org/news/secadv_20141015.txt
  • Vendor Advisory
70586
    MDVSA-2014:203
      RHSA-2014:1652
        DSA-3053
          HPSBUX03162
            RHSA-2014:1692
              openSUSE-SU-2014:1331
                USN-2385-1
                  SUSE-SU-2014:1357
                    61130
                      61073
                        62070
                          https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6
                            1031052
                              SUSE-SU-2014:1361
                                NetBSD-SA2014-015
                                  61207
                                    62030
                                      http://www-01.ibm.com/support/docview.wss?uid=swg21686997
                                        61819
                                          61058
                                            61990
                                              61837
                                                62124
                                                  http://www.splunk.com/view/SP-CAAANST
                                                    http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
                                                      http://support.apple.com/HT204244
                                                        APPLE-SA-2015-01-27-4
                                                          GLSA-201412-39
                                                            HPSBOV03227
                                                              HPSBMU03260
                                                                RHSA-2015:0126
                                                                  HPSBMU03267
                                                                    SSRT101868
                                                                      MDVSA-2015:062
                                                                        HPSBMU03304
                                                                          HPSBMU03296
                                                                            HPSBHF03300
                                                                              https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
                                                                                https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
                                                                                  https://kc.mcafee.com/corporate/index?page=content&id=SB10091
                                                                                    61959
                                                                                      61298
                                                                                        http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc
                                                                                          59627
                                                                                            http://advisories.mageia.org/MGASA-2014-0416.html
                                                                                              https://support.citrix.com/article/CTX216642
                                                                                                openSUSE-SU-2016:0640
                                                                                                  HPSBMU03263
                                                                                                    HPSBMU03223
                                                                                                      HPSBMU03261
                                                                                                        APPLE-SA-2015-09-16-2
                                                                                                          https://support.apple.com/HT205217
                                                                                                            http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
                                                                                                              https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=7fd4ce6a997be5f5c9e744ac527725c2850de203

                                                                                                                  1. Конфигурация 1

                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1:beta2:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0c:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0i:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:beta1:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1h:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:beta2:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0m:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1c:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1g:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:beta3:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0e:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1:beta3:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0f:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0d:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0j:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1a:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1:beta1:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1d:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0k:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:beta4:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*
                                                                                                                    End including
                                                                                                                    0.9.8zb
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1b:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1e:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0:beta5:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1f:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0a:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1i:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0b:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.1:*:*:*:*:*:*:*
                                                                                                                    cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*
                                                                                                                VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                                                                                                                Версия: v24.5.3
                                                                                                                Наверх