SB2016051110 - Multiple vulnerabilities in QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for BladeCenter
Published: May 11, 2016 Updated: May 11, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 12 secuirty vulnerabilities.
1) NULL pointer dereference (CVE-ID: CVE-2015-0288)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the X509_to_X509_REQ function in crypto/x509/x509_req.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
2) NULL pointer dereference (CVE-ID: CVE-2015-0289)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the PKCS#7 implementation. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
3) NULL pointer dereference (CVE-ID: CVE-2015-0290)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the multi-block feature in the ssl3_write_bytes function in s3_pkt.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
4) Input validation error (CVE-ID: CVE-2015-0293)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the SSLv2 implementation. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
5) Input validation error (CVE-ID: CVE-2015-1787)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the ssl3_get_client_key_exchange function in s3_srvr.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
6) Buffer overflow (CVE-ID: CVE-2015-0287)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.
7) Input validation error (CVE-ID: CVE-2015-0207)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the dtls1_listen function in d1_lib.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
8) NULL pointer dereference (CVE-ID: CVE-2015-0208)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
9) Cryptographic issues (CVE-ID: CVE-2015-0285)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the ssl3_client_hello function in s3_clnt.c does not ensure that the PRNG is seeded before proceeding with a handshak. A remote attacker can gain unauthorized access to sensitive information on the system.
10) Input validation error (CVE-ID: CVE-2015-0286)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the affected device does not properly perform boolean-type comparisons within the ASN1_TYPE_cmp function in crypto/asn1/a_type.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
11) Buffer overflow (CVE-ID: CVE-2015-0292)
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to a boundary error in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation. A remote attacker can trigger memory corruption and perform a denial of service (DoS) attack or possibly have unspecified other impact.
12) Use-after-free (CVE-ID: CVE-2015-0209)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c. A remote attacker can perform a denial of service (DoS) attack or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
Remediation
Install update from vendor's website.