OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability
BID:53158
Info
OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability
| Bugtraq ID: | 53158 |
| Class: | Design Error |
| CVE: |
CVE-2012-2110 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 19 2012 12:00AM |
| Updated: | Apr 13 2015 09:51PM |
| Credit: | Tavis Ormandy |
| Vulnerable: |
Xerox FreeFlow Print Server (FFPS) 73.C0.41 Xerox FreeFlow Print Server (FFPS) 73.B3.61 VMWare ESX 4.1 VMWare ESX 4.0 VMWare ESX 3.5 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP1 SuSE SUSE Linux Enterprise Server 11 SP2 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP4 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS SuSE SUSE Linux Enterprise SDK 11 SP2 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE SUSE Linux Enterprise SDK 10 SP4 SuSE SUSE Linux Enterprise for SAP Applications 11 SP1 SuSE SUSE Linux Enterprise Desktop 11 SP2 SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE SUSE Linux Enterprise Desktop 10 SP4 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat JBoss Enterprise Web Server for Windows 1.0.2 Red Hat JBoss Enterprise Web Server for Solaris 1.0.2 Red Hat JBoss Enterprise Application Platform 5.1.2 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional EUS 6.1 Red Hat Enterprise Linux Server Optional EUS 6.0 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server EUS 6.1.z Red Hat Enterprise Linux Server EUS 6.0 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux Long Life 5.3 Server Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux EUS 5.6.z server Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux AS 4 Red Hat Enterprise Linux AS 3 Red Hat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 4 OpenSSL Project OpenSSL 1.0.0h 0 OpenSSL Project OpenSSL 0.9.8u 0 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8O OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8N OpenSSL Project OpenSSL 0.9.8M OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 f Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Internet2 Shibboleth 2.4.3 IBM WebSphere DataPower SOA Appliance Firmware 4.0.2 IBM WebSphere DataPower SOA Appliance Firmware 4.0.1 IBM WebSphere DataPower SOA Appliance Firmware 3.8.2 IBM WebSphere DataPower SOA Appliance Firmware 3.8.1 IBM WebSphere DataPower SOA Appliance Firmware 3.8 .1 IBM WebSphere DataPower SOA Appliance Firmware 4.0 IBM WebSphere DataPower SOA Appliance Firmware 3.8 IBM Virtual I/O Server (VIOS) 2.1 IBM Virtual I/O Server (VIOS) 2.2 IBM Virtual I/O Server (VIOS) 2.1 IBM Virtual I/O Server (VIOS) 2.0 IBM Virtual I/O Server 2.1.3 IBM Virtual I/O Server 2.1.2 IBM Tivoli Netcool/OMNIbus 7.3 IBM Tivoli Endpoint Manager 8.2 patch 3 IBM OS/400 V7R1M0 0 IBM OS/400 V6R1M0 IBM Aix 7.1.1 IBM Aix 7.1 IBM Aix 6.1.7 IBM Aix 6.1.6 IBM AIX 6.1.5 IBM AIX 6.1.4 IBM AIX 6.1.3 IBM AIX 6.1.2 IBM AIX 6.1.1 IBM AIX 5.3.10 IBM AIX 5.3.9 IBM AIX 5.3.8 IBM AIX 5.3.7 IBM AIX 5.3 L IBM AIX 7.1 IBM AIX 6.2 IBM AIX 6.1 IBM AIX 5.3.12 IBM Aix 5.3.12 IBM AIX 5.3.11 IBM AIX 5.3 HP System Management Homepage 7.0 HP SSL for OpenVMS 1.4-453 HP SSL for OpenVMS 1.4 HP SSL for OpenVMS 1.3 HP Onboard Administrator 3.50 HP HP-UX B.11.31 HP HP-UX B.11.11 Gentoo Linux FreeBSD Freebsd 9.0-STABLE FreeBSD Freebsd 9.0-RELEASE FreeBSD Freebsd 8.3-STABLE FreeBSD Freebsd 8.2-STABLE FreeBSD Freebsd 8.2-STABLE FreeBSD Freebsd 8.2 FreeBSD Freebsd 8.1 FreeBSD Freebsd 7.4-STABLE FreeBSD Freebsd 7.4 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Collax Collax Business Server 5.5 BSD Perimeter pfSense 2.0.1 BSD Perimeter pfSense 2.0 Blue Coat Systems Proxysg 6.2 Blue Coat Systems Proxysg 6.1 Blue Coat Systems Intelligence Center 3.2 Blue Coat Systems Intelligence Center 3.1 Balabit syslog-ng Premium Edition 4.0.1 Balabit syslog-ng Premium Edition 4.1.2a Balabit syslog-ng Premium Edition 4.1 Balabit syslog-ng Premium Edition 4.0.3b Balabit syslog-ng Premium Edition 4.0.1a Avaya Voice Portal 5.1.2 Avaya Voice Portal 5.1.1 Avaya Voice Portal 5.1 SP1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 5.0 Avaya Proactive Contact 4.2.2 Avaya Proactive Contact 4.2.1 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0.1 Avaya Proactive Contact 4.0 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya IQ 4.1 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IQ 4.2 Avaya IQ 4.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya IP Office Application Server 7.0 Avaya IP Office Application Server 6.1 Avaya IP Office Application Server 6.0 Avaya Conferencing Standard Edition 6.0 SP1 Avaya Conferencing Standard Edition 6.0 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M Signaling Server 6.0 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000M 6.0 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E Signaling Server 6.0 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya Communication Server 1000E 6.0 Avaya Communication Manager 4.0.3 SP1 Avaya Communication Manager 5.0 SP3 Avaya Communication Manager 5.0 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura System Manager 5.2 Avaya Aura SIP Enablement Services 5.2.1 Avaya Aura SIP Enablement Services 5.2 Avaya Aura SIP Enablement Services 5.1 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Session Manager 1.0 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0 Avaya Aura Communication Manager Utility Services 6.2 Avaya Aura Communication Manager Utility Services 6.1 Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 Avaya Aura Communication Manager 4.0 Avaya Aura Application Server 5300 SIP Core 2.1 Avaya Aura Application Server 5300 SIP Core 2.0 Apple Mac Os X Server 10.7.4 Apple Mac Os X Server 10.7.3 Apple Mac Os X Server 10.7.1 Apple Mac Os X Server 10.7 Apple Mac Os X Server 10.6.8 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.2 Apple Mac Os X 10.7.1 |
| Not Vulnerable: |
OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 0.9.8v Collax Collax Business Server 5.5.2 |
Discussion
OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability
OpenSSL is prone to a remote memory-corruption vulnerability because of integer-truncation errors.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application using the vulnerable library. Failed exploit attempts will result in a denial-of-service condition.
OpenSSL versions up to and including 1.0.1 are affected.
OpenSSL is prone to a remote memory-corruption vulnerability because of integer-truncation errors.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application using the vulnerable library. Failed exploit attempts will result in a denial-of-service condition.
OpenSSL versions up to and including 1.0.1 are affected.
Solution / Fix
OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X 10.6.8
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X 10.6.8
-
Apple SecUpdSrvr2013-002.dmg
For Mac OS X Server v10.6.8
http://www.apple.com/support/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva libopenssl0.9.8-0.9.8h-3.15mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libopenssl0.9.8-devel-0.9.8h-3.15mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva libopenssl0.9.8-static-devel-0.9.8h-3.15mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva openssl-0.9.8h-3.15mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
References
OpenSSL Encoded ASN.1 Data Integer Truncation Memory Corruption Vulnerability
References:
References:
- 2014-11 Security Bulletin: Junos Space: Multiple vulnerabilities resolved by thi (Juniper Networks)
- Collax Business Server Homepage (collax)
- Collax Business Server Release Note (collax)
- IBM Netcool System Service Monitor SSM 4.0 Fix Pack 1 README Netcool/System Serv (IBM)
- IBM Netcool System Service Monitor SSM 4.0 Fix Pack 14 README Netcool/System Ser (IBM)
- IBM Product Security Incident Response Blog (IBM)
- incorrect integer conversions in OpenSSL can result in memory corruption (Tavis Ormandy)
- Juniper (PSN-2013-03-872): (Juniper Networks)
- OpenSSL Project (OpenSSL Project)
- pfSense 2.0.2 Release Now Available (BSD Perimeter)
- SE51936 - SC1-SSH-INCORROUT VULNERABILITY CVE-2012-2110 (IBM)
- Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Servic (IBM)
- Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Servic (IBM)
- Security Updates and Reflection (Attachmate)
- Security Updates and Reflection for Secure IT 7.x (Attachmate)
- Shibboleth Homepage (Internet2)
- VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption an (Avaya)
- Xerox Security Bulletin XRX12-009 (Xerox)
- ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities (Security Alert)
- Changes to the SSL library and Cryptographic Module used by components of the T (IBM)
- [security bulletin] HPSBMU02900 rev.3 - HP System Management Homepage (SMH) runn (HP)
- 2013-05 Security Bulletin: Steel Belted Radius: OpenSSL vulnerability CVE-2012-2 (Juniper Networks)
- 2014-11 Security Bulletin: Junos Space: Multiple vulnerabilities resolved by thi (Juniper)
- About the security content of OS X Mountain Lion v10.8.4 and Security Update 201 (Apple)
- Avaya security advisory ASA-2012-247 (Avaya)
- CVE-2012-2110 (OpenSSL Project)
- Firewall Enterprise Vulnerability Response CVE-2012-2110 (McAfee)
- GSKit Security Vulnerabilities addressed in IBM Tivoli Netcool OMNIbus (IBM)
- GSKit Security Vulnerabilities addressed in IBM Tivoli Network Manager 3.8 and 3 (IBM)
- HMC OpenSSL Upgrade to Address Cryptographic Vulnerabilities (IBM)
- HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorize (HP)
- HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Win (HP)
- HPSBOV02793 SSRT100891 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (HP)
- IBM Informix Genero affected by multiple vulnerabilities in OpenSSL (IBM)
- IBM Security Advisore swg21619837 (IBM)
- IBM Tivoli Composite Application Manager for Transactions Internet Service Monit (IBM)
- IBM Tivoli Network Manager IP 3.8.0 Fix Pack 7, 3.8.0-TIV-ITNMIP-FP0007 (IBM)
- IBM Tivoli Network Manager IP 3.9.0 Fix Pack 3, 3.9.0-TIV-ITNMIP-FP0003 (IBM)
- IC84088: ASN.1 PARSING VULNERABILITY IN SOME DATAPOWER SERVICES AND COMMANDS (CV (IBM)
- Multiple OpenSSL vulnerabilities (IBM)
- RHSA-2012:1306 openssl security update (Red Hat)
- RHSA-2012:1307 openssl security update (Red Hat)
- RHSA-2012:1308 openssl security update (Red Hat)
- SA70: OpenSSL ASN.1 BIO buffer overflow (CVE-2012-2110 and CVE-2012-2131) (Blue Coat Systems)
- Security Bulletin: IBM Endpoint Manager for Remote Control is affected by multip (IBM)
- Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected (IBM)
- Security Bulletin: IBM Sterling Connect:Enterprise for UNIX is affected by multi (IBM)
- Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by multiple (IBM)
- Security Bulletin: IBM Tivoli Composite Application Monitoring for Transactions (IBM)
- Security Bulletin: OpenSSL vulnerability issues for IBM Cloudburst (IBM)
- Security Bulletin: OpenSSL vulnerability issues for IBM Service Delivery Manager (IBM)
- Security Bulletin: Tivoli Endpoint Manager for Remote Control is affected by mul (IBM)
- Security Bulletin: Tivoli Remote Control is affected by multiple OpenSSL vulnera (IBM)
- Shibboleth Service Provider Security Advisory (Shibboleth )
- Storage HMC OpenSSL upgrade to address cryptographic vulnerabilities (IBM)
- Tivoli Workload Scheduler Openssl Multiple Vulnerabilities (IBM)
- VMSA-2012-0013 (VMWare)
- VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption an (VMware)