NULL pointer dereference in crypto - CVE-2020-29652

Vulnerability identifier: #VU69449

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-29652

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error when processing an authentication request message for the “gssapi-with-mic” method. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

crypto
ObjectScale
IBM Watson Machine Learning Accelerator
IBM Cloud Pak for Watson AIOps
Storage Ceph
IBM Cloud Pak System
Splunk Enterprise
IBM MQ Operator
OpenShift Virtualization
IBM CICS TX Standard
IBM CICS TX Advanced

Install updates from vendor's website.

crypto - update to 0.0.0-20201216223049-8b5274cf687f
ObjectScale - update to 1.3.0
IBM Cloud Pak System - update to 2.3.3.5
Splunk Enterprise - addressed in versions 8.2.12, 9.0.6, 9.1.1
IBM MQ Operator - addressed in versions 2.0.13, 2.4.1
IBM Watson Machine Learning Accelerator - update to 2.3.9
IBM Cloud Pak for Watson AIOps - update to 4.4.0
OpenShift Virtualization - update to 4.8.0
Storage Ceph - update to 7.1
IBM CICS TX Standard - update to 11.1.0.0 ifix5
IBM CICS TX Advanced - update to 11.1.0.0 ifix5

• https://go-review.googlesource.com/c/crypto/+/278852
• https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1
• https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E

• Denial of service in Go Crypto
• IBM CICS TX update for golang
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Splunk Enterprise update for third-party packages
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM Storage Ceph
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in Dell ObjectScale