SRTP Memory Leak in OpenSSL - CVE-2014-3513

Vulnerability identifier: #VU5212

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-3513

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information and cause denial of service.

The vulnerability exists due to a parsing error within DTLS SRTP extension in OpenSSL. A remote attacker can send a carefully crafted handshake message and free up to 64k of memory or cause denial of service conditions.

Successful exploitation of the vulnerability may allow an attacker to obtain potentially sensitive data, stored in system memory, or cause the affected service to fail.

OpenSSL
Debian Linux
Gentoo Linux
Amazon Linux AMI
SUSE Linux
Opensuse
Ubuntu
Slackware Linux
openssl (Alpine package)
HP System Management Homepage
WMI Mapper
FlashSystem V840 9846-AE1 & 9848-AE1
FlashSystem 840 9840-AE1 & 9843-AE1
OnCommand Workflow Automation
Open Systems SnapVault Agent
Data ONTAP SMI-S Agent
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2
TMS RAMSAN 710 and 810 Machine Type 9834 -AS1 and -AE1
FlashSystem V840 9846-AC0 & -AC1 and 9848-AC0 & -AC1
HP Insight Control
BladeSystem c-Class Virtual Connect Firmware
HP Onboard Administrator
OnCommand Unified Manager Core Package

Update OpenSSL to version 1.0.1j.

openssl (Alpine package) - update to 1.0.1j-r0
FlashSystem V840 9846-AE1 & 9848-AE1 - update to 1.1.3.2
FlashSystem 840 9840-AE1 & 9843-AE1 - update to 1.1.3.2
OnCommand Workflow Automation - update to 3.0
Open Systems SnapVault Agent - update to 3.0.1P6
BladeSystem c-Class Virtual Connect Firmware - update to 4.40
HP Onboard Administrator - update to 4.40
Data ONTAP SMI-S Agent - update to 5.2.1
OnCommand Unified Manager Core Package - update to 5.2.1P1
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1 - update to 5.6.2
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1 - update to 5.6.2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2 - update to 6.3.2
TMS RAMSAN 710 and 810 Machine Type 9834 -AS1 and -AE1 - update to 6.3.2
FlashSystem V840 9846-AC0 & -AC1 and 9848-AC0 & -AC1 - update to 7.3.0.8
HP Insight Control - update to 7.4.1

• https://www.openssl.org/news/secadv/20141015.txt

• Multiple vulnerabilities in OpenSSL
• Ubuntu update for OpenSSL
• Debian update for openssl
• Slackware Linux update for openssl
• openSUSE update for openssl
• SUSE Linux update for OpenSSL
• SUSE Linux update for openssl1
• Amazon Linux AMI update for openssl
• SRTP Memory Leak in openssl (Alpine package)
• Gentoo update for OpenSSL
• Multiple vulnerabilities in IBM FlashSystem 840 and V840 systems
• Multiple vulnerabilities in IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems
• Multiple vulnerabilities in HP Systems Insight Manager
• Multiple vulnerabilities in HP Insight Control server provisioning
• Multiple vulnerabilities in HP BladeSystem c-Class Onboard Administrator
• Multiple vulnerabilities in HP BladeSystem c-Class Virtual Connect Firmware
• Multiple vulnerabilities in Data ONTAP SMI-S Agent, OnCommand Workflow Automation, OnCommand Unified Manager Core Package and Open Systems SnapVault Agent