OpenSSL Update Fixes ASN.1 Memory Corruption and TLS Padding Oracle
Vulnerability Disclosure · 23 sources · Updated 2mo ago · First seen Oct 18, 2016
OpenSSL released fixes for seven vulnerabilities affecting older 1.0.1 and 1.0.2 branches, including high-severity CVE-2016-2108, an ASN.1 parsing and encoding flaw that can cause an out-of-bounds write and potentially exploitable memory corruption when untrusted ASN.1 data with ANY fields is reserialized. The release also fixed CVE-2016-2107, which permits a man-in-the-middle TLS/DTLS AES-CBC padding-oracle attack on AES-NI-capable servers, alongside denial-of-service, excessive-allocation, and EBCDIC overread issues.
The update additionally remediates heap-corruption defects CVE-2016-2105 and CVE-2016-2106 in the EVP_EncodeUpdate() and EVP_EncryptUpdate() APIs, respectively. Applications that directly submit exceptionally large input to these APIs may be vulnerable, while OpenSSL’s bounded internal PEM uses were not affected. OpenSSL issued versions 1.0.2h and 1.0.1t for most fixes, and Red Hat shipped patched RHEL 6 and RHEL 6.7 EUS packages; affected organizations should update and restart OpenSSL-linked services or reboot systems.
