Session Ticket Memory Leak in OpenSSL - CVE-2014-3567

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU5213

Session Ticket Memory Leak in OpenSSL - CVE-2014-3567

Published: January 20, 2017


Vulnerability identifier: #VU5213
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-3567
CWE-ID: CWE-401
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause denial of service.

The vulnerability exists due to an error when handling integrity of session tickets in OpenSSL. A remote attacker can send a large number of invalid session tickets and cause denial of service conditions.

Successful exploitation of the vulnerability may allow an attacker to perform a denial of service (DoS) attack.

Affected software

OpenSSL
Debian Linux
Gentoo Linux
Amazon Linux AMI
SUSE Linux
Opensuse
Ubuntu
Slackware Linux
openssl (Alpine package)
SUSE Studio Onsite
SUSE Manager
WMI Mapper
HP System Management Homepage
FlashSystem V840 9846-AE1 & 9848-AE1
FlashSystem 840 9840-AE1 & 9843-AE1
SSL for OpenVMS
OnCommand Workflow Automation
Open Systems SnapVault Agent
Data ONTAP SMI-S Agent
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2
TMS RAMSAN 710 and 810 Machine Type 9834 -AS1 and -AE1
FlashSystem V840 9846-AC0 & -AC1 and 9848-AC0 & -AC1
HP Insight Control
HP Onboard Administrator
BladeSystem c-Class Virtual Connect Firmware
SAN Volume Controller and Storwize Family
OnCommand Unified Manager Core Package
IBM Storwize V5000
IBM Storwize V3700
IBM Storwize V3500
IBM Storwize V7000

How to mitigate CVE-2014-3567

Update OpenSSL to version 0.9.8zc, 1.0.0o or 1.0.1j.

openssl (Alpine package) - update to 1.0.1j-r0
FlashSystem V840 9846-AE1 & 9848-AE1 - update to 1.1.3.2
FlashSystem 840 9840-AE1 & 9843-AE1 - update to 1.1.3.2
SSL for OpenVMS - update to 1.4-495
OnCommand Workflow Automation - update to 3.0
Open Systems SnapVault Agent - update to 3.0.1P6
HP Onboard Administrator - update to 4.40
BladeSystem c-Class Virtual Connect Firmware - update to 4.40
Data ONTAP SMI-S Agent - update to 5.2.1
OnCommand Unified Manager Core Package - update to 5.2.1P1
FlashSystem 710 & 810 Machine Type 9830 -AS1 & -AE1 - update to 5.6.2
TMS RAMSAN 710 & 810 Machine Type 9833 -AS1 & -AE1 - update to 5.6.2
IBM FlashSystem 720 and 820 Machine Type 9831 –AS2 and -AE2 - update to 6.3.2
TMS RAMSAN 710 and 810 Machine Type 9834 -AS1 and -AE1 - update to 6.3.2
SAN Volume Controller and Storwize Family - addressed in versions 7.1.0.12, 7.2.0.10, 7.3.0.8
IBM Storwize V5000 - addressed in versions 7.1.0.12, 7.2.0.10, 7.3.0.8
IBM Storwize V3700 - addressed in versions 7.1.0.12, 7.2.0.10, 7.3.0.8
IBM Storwize V3500 - addressed in versions 7.1.0.12, 7.2.0.10, 7.3.0.8
IBM Storwize V7000 - update to 7.2.0.10
FlashSystem V840 9846-AC0 & -AC1 and 9848-AC0 & -AC1 - update to 7.3.0.8
HP Insight Control - update to 7.4.1

External References

Related Security Bulletins