Information disclosure in OpenSSL - CVE-2015-3195

Vulnerability identifier: #VU77552

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-3195

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists in the ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL. A remote attacker can gain unauthorized access to sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.

OpenSSL
Fedora
Slackware Linux
SnapDrive for Unix
SnapDrive for Windows
Integrated Management Module II (IMM2)
Oracle HTTP Server
IBM BladeCenter Advanced Management Module
IBM Cloud Pak for Business Automation
openssl
openssl-solibs
openssl101e
FOS Firmware

Install updates from vendor's website.

OpenSSL - addressed in versions 0.9.8zh, 1.0.0t, 1.0.1q, 1.0.2e
SnapDrive for Unix - update to 5.3.1
SnapDrive for Windows - update to 7.1.4
openssl - addressed in versions 0.9.8zh, 1.0.1q
openssl-solibs - addressed in versions 0.9.8zh, 1.0.1q
Integrated Management Module II (IMM2) - update to 1aoo72h-5.60
openssl101e - update to 1.0.1e-5.el5
openssl - addressed in versions 1.0.1k-13.fc22, 1.0.2e-1.fc23
IBM BladeCenter Advanced Management Module - update to 3.66u
FOS Firmware - update to 7.4.1c
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF037, 24.0.0-IF003

• http://openssl.org/news/secadv/20151203.txt
• https://git.openssl.org/?p=openssl.git;a=commit;h=cc598f321fbac9c04da5766243ed55d55948637d
• http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
• https://support.apple.com/HT206167
• http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40100
• http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
• http://marc.info/?l=bugtraq&m=145382583417444&w=2
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
• http://www.securityfocus.com/bid/91787
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
• http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
• http://www.securityfocus.com/bid/78626
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html
• http://fortiguard.com/advisory/openssl-advisory-december-2015
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html
• http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10733
• http://www.fortiguard.com/advisory/openssl-advisory-december-2015
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00087.html
• http://lists.fedoraproject.org/pipermail/package-announce/2015-December/173801.html
• http://www.debian.org/security/2015/dsa-3413
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00071.html
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl
• http://rhn.redhat.com/errata/RHSA-2015-2617.html
• http://rhn.redhat.com/errata/RHSA-2015-2616.html
• http://www.ubuntu.com/usn/USN-2830-1
• http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.754583
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00103.html
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05398322
• http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
• http://www.securitytracker.com/id/1034294
• http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• http://rhn.redhat.com/errata/RHSA-2016-2957.html
• http://rhn.redhat.com/errata/RHSA-2016-2056.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf

• Multiple vulnerabilities in N series Products
• Multiple vulnerabilities in IBM b-type SAN switches and directors
• Multiple vulnerabilities in IBM BladeCenter Advanced Management Module (AMM)
• Information disclosure in Oracle HTTP Server
• Multiple vulnerabilities in IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems
• Slackware Linux update for openssl
• Fedora 23 update for openssl
• Fedora 22 update for openssl
• Fedora EPEL 5 update for openssl101e
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation