SB2023030212 - Multiple vulnerabilities in IBM FOS Firmware
Published: March 2, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 13 vulnerabilities.
1) Buffer overflow (CVE-ID: CVE-2015-0287)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in the ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c. A remote attacker can trigger memory corruption and cause a denial of service condition on the target system.
2) Input validation error (CVE-ID: CVE-2015-1787)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the ssl3_get_client_key_exchange function in s3_srvr.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
3) Input validation error (CVE-ID: CVE-2015-0293)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the SSLv2 implementation. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
4) Buffer overflow (CVE-ID: CVE-2015-0292)
CWE-ID: CWE-119 - Memory corruption
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to a boundary error in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation. A remote attacker can trigger memory corruption and perform a denial of service (DoS) attack or possibly have unspecified other impact.
5) NULL pointer dereference (CVE-ID: CVE-2015-0290)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the multi-block feature in the ssl3_write_bytes function in s3_pkt.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
6) NULL pointer dereference (CVE-ID: CVE-2015-0289)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the PKCS#7 implementation. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
7) NULL pointer dereference (CVE-ID: CVE-2015-0288)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the X509_to_X509_REQ function in crypto/x509/x509_req.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
8) Input validation error (CVE-ID: CVE-2015-0286)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the affected device does not properly perform boolean-type comparisons within the ASN1_TYPE_cmp function in crypto/asn1/a_type.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
9) Cryptographic issues (CVE-ID: CVE-2015-0285)
CWE-ID: CWE-310 - Cryptographic Issues
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the ssl3_client_hello function in s3_clnt.c does not ensure that the PRNG is seeded before proceeding with a handshak. A remote attacker can gain unauthorized access to sensitive information on the system.
10) Use-after-free (CVE-ID: CVE-2015-0209)
CWE-ID: CWE-416 - Use After Free
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c. A remote attacker can perform a denial of service (DoS) attack or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
11) NULL pointer dereference (CVE-ID: CVE-2015-0208)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
12) Input validation error (CVE-ID: CVE-2015-0207)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the dtls1_listen function in d1_lib.c. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
13) NULL pointer dereference (CVE-ID: CVE-2015-0291)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the sigalgs implementation in t1_lib.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.