Information disclosure in OpenSSL - CVE-2016-0702
Published: December 21, 2016 / Updated: March 30, 2018
Vulnerability identifier: #VU1962
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-0702
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to decrypt data passed via encrypted SSL connection.
The vulnerability exists in the MOD_EXP_CTIME_COPY_FROM_PREBUF() function in crypto/bn/bn_exp.c. The application does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts.
The vulnerability was dubbed "CacheBleed".
The vulnerability exists in the MOD_EXP_CTIME_COPY_FROM_PREBUF() function in crypto/bn/bn_exp.c. The application does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts.
The vulnerability was dubbed "CacheBleed".
Affected software
OpenSSL
Tivoli Network Manager IP Edition
Planning Analytics Local
IBM Tivoli Directory Server
IBM MQ
IBM BladeCenter Advanced Management Module
SUSE Linux
Slackware Linux
Fedora
Opensuse
IBM Cognos Controller
Integrated Data protection Appliance (IDPA)
Data Protection Search
openssl
openssl-solibs
Tivoli Network Manager IP Edition
Planning Analytics Local
IBM Tivoli Directory Server
IBM MQ
IBM BladeCenter Advanced Management Module
SUSE Linux
Slackware Linux
Fedora
Opensuse
IBM Cognos Controller
Integrated Data protection Appliance (IDPA)
Data Protection Search
openssl
openssl-solibs
How to mitigate CVE-2016-0702
Update to version 1.0.1s or 1.0.2g.
openssl - addressed in versions 0.9.8zh, 1.0.1s
openssl-solibs - addressed in versions 0.9.8zh, 1.0.1s
openssl - addressed in versions 1.0.1k-14.fc22, 1.0.2g-1.fc23, 1.0.2g-2.fc23
Integrated Data protection Appliance (IDPA) - update to 2.7.8 with DP Search 19.6.6
IBM BladeCenter Advanced Management Module - update to 3.66u
Data Protection Search - update to 19.6.6
openssl-solibs - addressed in versions 0.9.8zh, 1.0.1s
openssl - addressed in versions 1.0.1k-14.fc22, 1.0.2g-1.fc23, 1.0.2g-2.fc23
Integrated Data protection Appliance (IDPA) - update to 2.7.8 with DP Search 19.6.6
IBM BladeCenter Advanced Management Module - update to 3.66u
Data Protection Search - update to 19.6.6
External References
Related Security Bulletins
- Information disclosure in OpenSSL
- Multiple vulnerabilities in IBM Cognos Controller
- Information disclosure in IBM MQ
- Multiple vulnerabilities in IBM Planning Analytics Local
- Multiple vulnerabilities in IBM Tivoli Directory
- OpenSUSE Linux update for nodejs
- SUSE Linux update for openssl
- SUSE Linux update for openssl
- OpenSUSE Linux update for compat-openssl098
- OpenSUSE Linux update for libopenssl0_9_8
- Information disclosure in IBM Tivoli Network Manager IP Edition
- Multiple vulnerabilities in IBM BladeCenter Advanced Management Module (AMM)
- Slackware Linux update for openssl
- Fedora 23 update for openssl
- Fedora 23 update for openssl
- Fedora 22 update for openssl
- Multiple vulnerabilities in Dell Data Protection Search