BID:70586

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

Info

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

Bugtraq ID:	70586
Class:	Design Error
CVE:	CVE-2014-3567
Remote:	Yes
Local:	No
Published:	Oct 15 2014 12:00AM
Updated:	Sep 09 2016 03:00PM
Credit:	Reported by the vendor.
Vulnerable:	VMWare vCenter Server 5.5 VMWare vCenter Server 5.1 VMWare vCenter Server 5.0 VMWare ESXi 5.5 VMWare ESXi 5.1 VMWare ESXi 5.0 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Studio Onsite 1.3 SuSE SUSE Manager for SLE 11 SP2 1.7 Splunk Splunk 6.0.6 Splunk Splunk 6.0.3 Splunk Splunk 6.0.2 Splunk Splunk 6.0.1 Splunk Splunk 6.0 Splunk Splunk 5.0.10 Splunk Splunk 5.0.6 Splunk Splunk 5.0.5 Splunk Splunk 5.0.4 Splunk Splunk 5.0.2 Splunk Splunk 5.0 Splunk Splunk 6.0.4 Splunk Splunk 5.0.9 Splunk Splunk 5.0.8 Splunk Splunk 5.0.3 Splunk Splunk 5.0.1 Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 Oracle Tuxedo 12.1.1.0 Oracle Secure Global Desktop 5.1 Oracle Secure Global Desktop 5.0 Oracle Secure Global Desktop 4.71 Oracle Secure Global Desktop 4.63 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 OpenSSL Project OpenSSL 1.0.0h 0 OpenSSL Project OpenSSL 0.9.8u 0 OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 1.0.1 beta1 OpenSSL Project OpenSSL 1.0 beta3 OpenSSL Project OpenSSL 1.0 Beta2 OpenSSL Project OpenSSL 1.0 beta1 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 Beta3 OpenSSL Project OpenSSL 1.0.1 Beta2 OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0A OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 1.0.0 Beta5 OpenSSL Project OpenSSL 1.0.0 Beta4 OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Juniper EX Series Network Switches for IBM products Pre 12.3R9 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.2 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.2 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.2 IBM Upward Integration Modules (UIM) for VMware vSphere 3.0.1 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.2 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.0.1 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5 IBM Tivoli Workload Scheduler for Applications 8.6 IBM Tivoli Workload Scheduler for Applications 8.5 FP01 IBM Tivoli Workload Scheduler for Applications 8.4 FP02 IBM Tivoli Provisioning Manager for OS Deployment 5.1 IBM Tivoli Provisioning Manager for OS Deployment 7.1.1 IBM Tivoli Provisioning Manager for Images System x Edition 7.1.1.0 IBM Tivoli Provisioning Manager for Images 7.1.1.0 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP9 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP8 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP7 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP6 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP5 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP4 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP3 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP2 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP13 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP12 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP11 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP10 IBM Tivoli Netcool/System Service Monitor 4.0.0 FP1 IBM Tivoli Netcool/Reporter 2.2 IBM Tivoli Management Framework 4.1.1 IBM Tivoli Composite Application Manager for Transactions 7.4 IBM Tivoli Composite Application Manager for Transactions 7.3.0 IBM Tivoli Composite Application Manager for Transactions 7.2.0 IBM Systems Director Storage Control 4.2.6.0 IBM Systems Director Storage Control 4.2.4.1 IBM Systems Director Storage Control 4.2.4.0 IBM Systems Director Storage Control 4.2.3.2 IBM Systems Director Storage Control 4.2.3.1 IBM Systems Director Storage Control 4.2.3.0 IBM Systems Director Storage Control 4.2.2.1 IBM Systems Director Storage Control 4.2.2.0 IBM Systems Director Storage Control 4.2.1.1 IBM Systems Director Storage Control 4.2.1.0 IBM Systems Director Common Agent for Windows 6.3.5 IBM Systems Director Common Agent for Windows 6.3.4 IBM Systems Director Common Agent for Windows 6.3.3 IBM Systems Director Common Agent for Windows 6.3.2 IBM Systems Director Common Agent for Windows 6.3.1 IBM Systems Director Common Agent for Linux 6.3.5 IBM Systems Director Common Agent for Linux 6.3.4 IBM Systems Director Common Agent for Linux 6.3.3 IBM Systems Director Common Agent for Linux 6.3.2 IBM Systems Director Common Agent for Linux 6.3.1 IBM Systems Director 6.3.2 0 IBM Systems Director 5.2 IBM Systems Director 6.3.5.0 IBM Systems Director 6.3.3.1 IBM Systems Director 6.3.3.0 IBM Systems Director 6.3.2.2 IBM Systems Director 6.3.2.1 IBM Systems Director 6.3.1.1 IBM Systems Director 6.3.1.0 IBM Systems Director 6.3.0.0 IBM Systems Director 6.2.1.2 IBM Systems Director 6.2.1.0 IBM Systems Director 6.2.0.0 IBM Systems Director 6.1.0.0 IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 3 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.4.3.6 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Storwize V7000 0 IBM Storwize V5000 - IBM Storwize V3700 - IBM Storwize V3500 - IBM Sterling File Gateway 2.2 IBM Sterling File Gateway 2.1 IBM Sterling Connect:Express for UNIX 1.5.0.11 iFix 150-11 IBM Sterling Connect:Express for UNIX 1.5.0.11 IBM Sterling Connect:Express for UNIX 1.4.6.1 iFix 146-108 IBM Sterling Connect:Express for UNIX 1.4.6 IBM Sterling Connect:Enterprise HTTP Option 1.4 IBM Sterling Connect:Enterprise HTTP Option 1.3 IBM Sterling Connect:Enterprise for UNIX 2.5 IBM Sterling Connect:Enterprise for UNIX 2.4.4 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1 IBM Smart Analytics System 5600 3 IBM Smart Analytics System 5600 2 IBM Smart Analytics System 5600 1 IBM Security Virtual Server Protection for VMware 1.1.1 IBM Security Virtual Server Protection for VMware 1.1.0.1 IBM Security Virtual Server Protection for VMware 1.1 IBM Security Network Intrusion Prevention System GX7800 4.6.2 IBM Security Network Intrusion Prevention System GX7800 4.6.1 IBM Security Network Intrusion Prevention System GX7800 4.6 IBM Security Network Intrusion Prevention System GX7800 4.5 IBM Security Network Intrusion Prevention System GX7800 4.4 IBM Security Network Intrusion Prevention System GX7800 4.3 IBM Security Network Intrusion Prevention System GX7412-10 4.6.2 IBM Security Network Intrusion Prevention System GX7412-10 4.6.1 IBM Security Network Intrusion Prevention System GX7412-10 4.6 IBM Security Network Intrusion Prevention System GX7412-10 4.5 IBM Security Network Intrusion Prevention System GX7412-10 4.4 IBM Security Network Intrusion Prevention System GX7412-10 4.3 IBM Security Network Intrusion Prevention System GX7412-05 4.6.2 IBM Security Network Intrusion Prevention System GX7412-05 4.6.1 IBM Security Network Intrusion Prevention System GX7412-05 4.6 IBM Security Network Intrusion Prevention System GX7412-05 4.5 IBM Security Network Intrusion Prevention System GX7412-05 4.4 IBM Security Network Intrusion Prevention System GX7412-05 4.3 IBM Security Network Intrusion Prevention System GX7412 4.6.2 IBM Security Network Intrusion Prevention System GX7412 4.6.1 IBM Security Network Intrusion Prevention System GX7412 4.6 IBM Security Network Intrusion Prevention System GX7412 4.5 IBM Security Network Intrusion Prevention System GX7412 4.4 IBM Security Network Intrusion Prevention System GX7412 4.3 IBM Security Network Intrusion Prevention System GX6116 4.6.2 IBM Security Network Intrusion Prevention System GX6116 4.6.1 IBM Security Network Intrusion Prevention System GX6116 4.6 IBM Security Network Intrusion Prevention System GX6116 4.5 IBM Security Network Intrusion Prevention System GX6116 4.4 IBM Security Network Intrusion Prevention System GX6116 4.3 IBM Security Network Intrusion Prevention System GX5208-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5208-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5208-v2 4.6 IBM Security Network Intrusion Prevention System GX5208-v2 4.5 IBM Security Network Intrusion Prevention System GX5208-v2 4.4 IBM Security Network Intrusion Prevention System GX5208-v2 4.3 IBM Security Network Intrusion Prevention System GX5208 4.6.2 IBM Security Network Intrusion Prevention System GX5208 4.6.1 IBM Security Network Intrusion Prevention System GX5208 4.6 IBM Security Network Intrusion Prevention System GX5208 4.5 IBM Security Network Intrusion Prevention System GX5208 4.4 IBM Security Network Intrusion Prevention System GX5208 4.3 IBM Security Network Intrusion Prevention System GX5108-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5108-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5108-v2 4.6 IBM Security Network Intrusion Prevention System GX5108-v2 4.5 IBM Security Network Intrusion Prevention System GX5108-v2 4.4 IBM Security Network Intrusion Prevention System GX5108-v2 4.3 IBM Security Network Intrusion Prevention System GX5108 4.6.2 IBM Security Network Intrusion Prevention System GX5108 4.6.1 IBM Security Network Intrusion Prevention System GX5108 4.6 IBM Security Network Intrusion Prevention System GX5108 4.5 IBM Security Network Intrusion Prevention System GX5108 4.4 IBM Security Network Intrusion Prevention System GX5108 4.3 IBM Security Network Intrusion Prevention System GX5008-v2 4.6.2 IBM Security Network Intrusion Prevention System GX5008-v2 4.6.1 IBM Security Network Intrusion Prevention System GX5008-v2 4.6 IBM Security Network Intrusion Prevention System GX5008-v2 4.5 IBM Security Network Intrusion Prevention System GX5008-v2 4.4 IBM Security Network Intrusion Prevention System GX5008-v2 4.3 IBM Security Network Intrusion Prevention System GX5008 4.6.2 IBM Security Network Intrusion Prevention System GX5008 4.6.1 IBM Security Network Intrusion Prevention System GX5008 4.6 IBM Security Network Intrusion Prevention System GX5008 4.5 IBM Security Network Intrusion Prevention System GX5008 4.4 IBM Security Network Intrusion Prevention System GX5008 4.3 IBM Security Network Intrusion Prevention System GX4004-v2 4.6.2 IBM Security Network Intrusion Prevention System GX4004-v2 4.6.1 IBM Security Network Intrusion Prevention System GX4004-v2 4.6 IBM Security Network Intrusion Prevention System GX4004-v2 4.5 IBM Security Network Intrusion Prevention System GX4004-v2 4.4 IBM Security Network Intrusion Prevention System GX4004-v2 4.3 IBM Security Network Intrusion Prevention System GX4004 4.6.2 IBM Security Network Intrusion Prevention System GX4004 4.6.1 IBM Security Network Intrusion Prevention System GX4004 4.6 IBM Security Network Intrusion Prevention System GX4004 4.5 IBM Security Network Intrusion Prevention System GX4004 4.4 IBM Security Network Intrusion Prevention System GX4004 4.3 IBM Security Network Intrusion Prevention System GX4002 4.6.2 IBM Security Network Intrusion Prevention System GX4002 4.6.1 IBM Security Network Intrusion Prevention System GX4002 4.6 IBM Security Network Intrusion Prevention System GX4002 4.5 IBM Security Network Intrusion Prevention System GX4002 4.4 IBM Security Network Intrusion Prevention System GX4002 4.3 IBM Security Network Intrusion Prevention System GX3002 4.6.2 IBM Security Network Intrusion Prevention System GX3002 4.6.1 IBM Security Network Intrusion Prevention System GX3002 4.6 IBM Security Network Intrusion Prevention System GX3002 4.5 IBM Security Network Intrusion Prevention System GX3002 4.4 IBM Security Network Intrusion Prevention System GX3002 4.3 IBM SDK for Node.js 1.1.0.7 IBM SDK for Node.js 1.1.0.6 IBM SDK for Node.js 1.1.0.5 IBM SDK for Node.js 1.1.0.3 IBM SDK for Node.js 1.1.0.2 IBM SDK for Node.js 1.1 IBM SAN Volume Controller 0 IBM Rational Software Architect RealTime Edition 9.1.1 IBM Rational Software Architect RealTime Edition 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Application Developer for WebSphere 9.1.1 IBM Rational Application Developer for WebSphere 9.1.0.1 IBM Rational Application Developer for WebSphere 9.1 IBM QRadar Vulnerability Manager 7.2.3 IBM QRadar SIEM 7.2.3 IBM QRadar SIEM 7.1 MR2 IBM QRadar Risk Manager 7.2.3 IBM QRadar Risk Manager 7.1 MR2 IBM PureApplication System 2.0 IBM PureApplication System 1.1 IBM PureApplication System 1.0 IBM Power HMC 8.8.2.0 IBM Power HMC 8.8.1.0 IBM Power HMC 7.7.9.0 IBM Power HMC 7.7.8.0 IBM Power HMC 7.7.7.0 IBM Power HMC 7.7.3.0 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET24G-2.09 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET24D-2.08 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET24B-2.07 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET23G-2.06 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET21E-2.05 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET21C-2.04 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET17A-2.02 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET13A-2.00 IBM Netcool/System Service Monitor 4.0.1 FP1 IBM Netcool/System Service Monitor 4.0.0 FP1 - P14 IBM MegaRAID Storage Manager (MSM) 15.03.01.00 IBM Lotus Protector for Mail Security 2.8 0 IBM Lotus Protector for Mail Security 2.8.1.0 IBM Local Console Manager (LCM8) 1.2.39.0 IBM Local Console Manager (LCM8) 1.2.27.00 IBM Local Console Manager (LCM16) 1.2.39.0 IBM Local Console Manager (LCM16) 1.2.27.00 IBM Initiate Master Data Service Provider Hub 9.7 IBM Initiate Master Data Service Provider Hub 9.5 IBM Initiate Master Data Service Patient Hub 9.7 IBM Initiate Master Data Service Patient Hub 9.5 IBM Initiate Master Data Service 9.7 IBM Initiate Master Data Service 9.5 IBM Initiate Master Data Service 9.2 IBM Initiate Master Data Service 9.0 IBM Initiate Master Data Service 8.5 IBM Initiate Master Data Service 10.1 IBM Initiate Master Data Service 10.0 IBM InfoSphere Master Data Management Provider Hub 10.0 IBM InfoSphere Master Data Management Patient Hub 10.0 IBM Infosphere Master Data Management 11.4 IBM Infosphere Master Data Management 11.3 IBM Infosphere Master Data Management 11.0 IBM InfoSphere Information Server 9.1 IBM InfoSphere Information Server 8.7 IBM InfoSphere Information Server 8.5 IBM InfoSphere Information Server 8.1 IBM InfoSphere Information Server 11.3 IBM Image Construction and Composition Tool 2.3.1.0 IBM Image Construction and Composition Tool 2.2.1.3 IBM Global Console Manager (GCM32) 1.4.2.15036 IBM Global Console Manager (GCM32) 1.20.20.23447 IBM Global Console Manager (GCM16) 1.4.2.15036 IBM Global Console Manager (GCM16) 1.20.20.23447 IBM General Parallel File System (GPFS) 3.5.0 IBM Flex System V7000 0 IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.2 IBM Flex System Manager 1.2.1 IBM Flex System Manager 1.2 IBM Flex System Manager 1.1 IBM Flex System Manager 1.3.1.0 IBM Flex System Manager 1.3.1 IBM Flex System Manager 1.3.0.1 IBM Flex System Manager 1.3.0.0 IBM Flex System Manager 1.3.0 IBM Flex System Manager 1.2.1.0 IBM Flex System Manager 1.2.0.0 IBM Flex System Manager 1.1.0.0 IBM Flex System IB6131 40Gb Infiniband Switch 3.4 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.3 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.2 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1.1 IBM Flex System FC3171 8Gb SAN Switch (69Y1930) 9.1 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.3 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.2 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1.1 IBM Flex System FC3171 8Gb SAN Pass-thru (69Y1934) 9.1 IBM Flex System EN6131 40Gb Ethernet Switch 3.4 IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PET12I) IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PET12H) IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PET12G) IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PET12F) IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PEO12G) IBM Flex System Chassis Management Module (CMM) 1.50.1 (2PEO12F) IBM Flex System Chassis Management Module (CMM) 1.50.0(2PET12E) IBM Flex System Chassis Management Module (CMM) 1.50.0(2PET12D) IBM Flex System Chassis Management Module (CMM) 1.50.0 (2PET12D) IBM Flex System Chassis Management Module (CMM) 1.50.0 (2PEO12D) IBM Flex System Chassis Management Module (CMM) 1.40.2(2PET10Q) IBM Flex System Chassis Management Module (CMM) 1.40.1(2PET10P) IBM Flex System Chassis Management Module (CMM) 1.40.1(2PET10M) IBM Flex System Chassis Management Module (CMM) 1.40.0(2PET10K) IBM Flex System Chassis Management Module (CMM) 1.20.2(2PET10I) IBM Flex System Chassis Management Module (CMM) 1.20.1(2PET10H) IBM Flex System Chassis Management Module (CMM) 1.20.0(2PET10G) IBM Flex System Chassis Management Module (CMM) 1.1.1(2PET10F) IBM Flex System Chassis Management Module (CMM) 1.1.1(2PET10E) IBM Flex System Chassis Management Module (CMM) 1.1.1(2PET10D) IBM Flex System Chassis Management Module (CMM) 1.1.1(2PET10C) IBM Flex System Chassis Management Module (CMM) 1.1.0(2PET10B) IBM Flex System Chassis Management Module (CMM) 1.0.0(2PET10A) IBM Flex System Chassis Management Module (CMM) (PEO12I) IBM Flex System Chassis Management Module (CMM) (2PETE6L) IBM Flex System Chassis Management Module (CMM) (2PETE5O) IBM Flex System Chassis Management Module (CMM) (2PET12R) IBM Flex System Chassis Management Module (CMM) (2PET12P) IBM Flex System Chassis Management Module (CMM) (2PET12O) IBM Flex System Chassis Management Module (CMM) (2PET12K) IBM Flex System Chassis Management Module (CMM) (2PEO12R) IBM Flex System Chassis Management Module (CMM) (2PEO12P) IBM Flex System Chassis Management Module (CMM) (2PEO12O) IBM Flex System Chassis Management Module (CMM) (2PEO12E) IBM ContactOptimization 9.1.1 IBM ContactOptimization 9.1 IBM ContactOptimization 9.0 IBM ContactOptimization 8.6 IBM ContactOptimization 8.5 IBM ContactOptimization 8.3 IBM ContactOptimization 8.2 IBM ContactOptimization 8.1 IBM ContactOptimization 8.0 IBM ContactOptimization 7.6 IBM ContactOptimization 7.5 IBM ContactOptimization 7.4 IBM ContactOptimization 7.3 IBM ContactOptimization 7.2 IBM ContactOptimization 7.1 IBM ContactOptimization 7.0 IBM Connect:Enterprise Secure Client 1.4 IBM Connect:Enterprise Secure Client 1.3 IBM Connect:Enterprise Command Line Client 1.3 IBM Cognos TM1 10.2.2 IBM Cognos TM1 9.5.2 IBM Cognos TM1 10.2 IBM Cognos TM1 10.1.1 IBM Cognos Planning 10.1.1 IBM Cognos Planning 10.1 IBM Cognos Insight 10.2.2.2 IBM Cognos Insight 10.2.1.2 IBM Cognos Insight 10.2.0.1 IBM Cognos Controller 10.2.1 IBM Cognos Controller 10.1.1 IBM Cognos Controller 8.5.1 IBM Cognos Controller 8.5 IBM Cognos Controller 10.2 IBM Cognos Controller 10.1 IBM Campaign 9.1.1 IBM Campaign 9.1 1 IBM Campaign 9.1 0 IBM Campaign 9.1 IBM Campaign 9.1.0.4 IBM Campaign 9.1 IBM Campaign 9.0 IBM Campaign 8.6 IBM Campaign 8.5 IBM Campaign 8.3 IBM Campaign 8.2 IBM Campaign 8.1 IBM Campaign 8.0 IBM Campaign 7.6 IBM Campaign 7.5 IBM Campaign 7.4 IBM Campaign 7.3 IBM Campaign 7.2 IBM Campaign 7.1 IBM Campaign 7.0 IBM BladeCenter(TM)-T 8730 IBM BladeCenter(TM)-T 8720 IBM BladeCenter(TM)-S 8886 IBM BladeCenter(TM)-S 7779 IBM BladeCenter(TM)-S 1948 IBM BladeCenter(TM)-HT 8750 IBM BladeCenter(TM)-HT 8740 IBM BladeCenter(TM)-H 8852 IBM BladeCenter(TM)-H 7989 IBM BladeCenter(TM)-H 1886 IBM BladeCenter(TM)-E 8677 IBM BladeCenter(TM)-E 7967 IBM BladeCenter(TM)-E 1881 IBM BladeCenter T Advanced Management Module 32R0835 IBM BladeCenter Advanced Management Module 3.66K (BPET66K) IBM BladeCenter Advanced Management Module 3.66K (BPEO66K) IBM BladeCenter Advanced Management Module 3.66K (BBET66K) IBM BladeCenter Advanced Management Module 25R5778 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP YB 0 HP YA 0 HP Y 0 HP WB 0 HP W 0 HP VSR1000 0 HP Virtual Connect Enterprise Manager SDK 7.4 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 7.5.0 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2 HP Version Control Agent 7.3.2 HP VB 0 HP VA 0 HP U 0 HP T 0 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.5.0 HP Systems Insight Manager 7.4.0a HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 HP System Management Homepage 7.5.4 HP System Management Homepage 7.5 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 7.4.0a HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2.1 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2 HP System Management Homepage 6.1 HP System Management Homepage 6.0 HP Storage Provisioning Manager 2.4 HP Storage Provisioning Manager 2.3.2 HP Storage Provisioning Manager 2.3 HP Storage Provisioning Manager 2.2.2 HP Storage Provisioning Manager 2.2 HP SSL for OpenVMS 1.4-493 HP SSL for OpenVMS 1.4-476 HP SSL for OpenVMS 1.4-471 HP SSL for OpenVMS 1.4-467 HP SSL for OpenVMS 1.4-453 HP SSL for OpenVMS 1.4 HP Server Migration Pack 7.5 HP RF Manager 0 HP RA 0 HP R 0 HP Q 0 HP PS110 0 HP PB 0 HP PA 0 HP OneView 1.10 HP OneView 1.05 HP OneView 1.01 HP OneView 1.0 HP Office Connect PS1810 0 HP Office Connect 1810 PM 0 HP Office Connect 1810 PL 0 HP Office Connect 1810 PK 0 HP Office Connect 1810 P 0 HP N 0 HP MSR2000 0 HP Matrix Operating Environment 7.5 HP Matrix Operating Environment 7.4 HP Matrix Operating Environment 7.3.2 HP Matrix Operating Environment 7.3.1 HP Matrix Operating Environment 7.3 HP Matrix Operating Environment 7.2.2 HP Matrix Operating Environment 7.2.1 HP Matrix Operating Environment 7.2 HP M220 0 HP M210 0 HP M.10 0 HP M.08 0 HP L 0 HP KB 0 HP KA 0 HP K 0 HP J 0 HP Insight Control server provisioning 7.4.1 HP Insight Control server provisioning 7.5.0 HP Insight Control server provisioning 7.4.0a HP Insight Control server provisioning 7.4.0 HP Insight Control Server Deployment 7.3.1 HP Insight Control Server Deployment 7.2.2 HP Insight Control Server Deployment 7.2.1 HP Insight Control Server Deployment 7.2.0 HP Insight Control Server Deployment 7.1.2 HP Insight Control 7.5 HP Insight Control 7.4 HP Insight Control 7.3 HP Insight Control 7.2 HP iMC WSM 0 HP iMC UAM 0 HP i.10 0 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 HP H.10 0 HP H.07 0 HP F 0 HP E 0 HP CloudSystem Matrix 7.4 HP CloudSystem Matrix 7.3.2 HP CloudSystem Matrix 7.3.1 HP CloudSystem Matrix 7.3 HP CloudSystem Matrix 7.2.3 HP CloudSystem Matrix 7.2.2 HP CloudSystem Matrix 7.2.1 HP CloudSystem Matrix 7.2 HP CloudSystem Foundation 8.1 HP CloudSystem Foundation 8.0.2 HP CloudSystem Enterprise software 8.1 HP CloudSystem Enterprise software 8.0.2 HP BladeSystem c-Class Onboard Administrator 4.30 HP BladeSystem c-Class Onboard Administrator 4.22 HP BladeSystem c-Class Onboard Administrator 4.21 HP BladeSystem c-Class Onboard Administrator 4.20 HP BladeSystem c-Class Onboard Administrator 4.11 HP A 0 HP 7900 0 HP 5920 Switch Series 0 HP 5900 Switch Series 0 HP 5700 0 HP 5130 EI switch Series 0 HP 12900 Switch Series 0 HP 12500(Comware v7) 0 HP 11900 Switch Series 0 HP 10500 Switch Series (Comware v7) 0 Gentoo Linux FreeBSD FreeBSD 9.3 FreeBSD FreeBSD 9.2 FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0 FreeBSD FreeBSD 8.4 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 10.1 FreeBSD FreeBSD 10.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 CentOS CentOS 6 Bluecoat X-Series XOS 10.0 Bluecoat SSL Visibility 3.8 Bluecoat SSL Visibility 3.7 Bluecoat Security Analytics Platform 7.1 Bluecoat Security Analytics Platform 7.0 Bluecoat Security Analytics Platform 6.6 Bluecoat Reporter's ISO 9.4 Bluecoat ProxySG SGOS 6.5 Bluecoat ProxySG SGOS 6.2 Bluecoat ProxySG SGOS 5.5 Bluecoat Proxyav 3.5 Bluecoat Proxyav 3.4 Bluecoat PolicyCenter 9.2 Bluecoat PacketShaper S-Series 11.2 Bluecoat PacketShaper S-Series 11.1 Bluecoat PacketShaper S-Series 11.0 Bluecoat PacketShaper 9.2 Bluecoat Norman Shark SCADA Protection 5.2 Bluecoat Norman Shark SCADA Protection 5.0 Bluecoat Norman Shark Network Protection 5.2 Bluecoat Norman Shark Network Protection 5.0 Bluecoat Norman Shark Industrial Control System Protection 5.2 Bluecoat Norman Shark Industrial Control System Protection 5.1 Bluecoat Norman Shark Industrial Control System Protection 5.0 Bluecoat Malware Analyzer G2 4.1 Bluecoat Malware Analyzer G2 3.5 Bluecoat Malware Analysis Appliance 4.2 Bluecoat Malware Analysis Appliance 4.1.1 Bluecoat Malware Analysis Appliance 4.1 Bluecoat Director 6.1.13 1 Bluecoat Director 6.1 Bluecoat Content Analysis System Software 1.1.5 3 Bluecoat Content Analysis System Software 1.1.5.2 Bluecoat Content Analysis System Software 1.1.4.2 Bluecoat Content Analysis System Software 1.1.2.1 Bluecoat Content Analysis System Software 1.1.1.1 Bluecoat Content Analysis System 1.2 Bluecoat Content Analysis System 1.1 Bluecoat CacheFlow 3.3 Bluecoat CacheFlow 3.2 Bluecoat CacheFlow 3.0 Bluecoat CacheFlow 2.2 Bluecoat CacheFlow 2.0 Bluecoat BCAAA 6.1 Bluecoat BCAAA 5.5 Avaya CMS r17 Avaya Aura Utility Services 6.3 SP7 Avaya Aura Utility Services 6.3 Avaya Aura Utility Services 6.2 Avaya Aura System Manager 6.3.10 Avaya Aura System Manager 6.3.6 Avaya Aura System Manager 6.3.4 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3.3 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.4 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura Session Manager 6.3.1 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.3.3 Avaya Aura Session Manager 6.3 Avaya Aura Session Manager 6.2.4 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.2 Avaya Aura Presence Services 6.1 SP2 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Communication Manager 6.3.8 Avaya Aura Communication Manager 6.3 SSP04 Avaya Aura Communication Manager 6.3 Avaya Aura Communication Manager 6.2 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.3 Asperasoft Aspera Shares 1.7.5 Asperasoft Aspera Shares 1.7.3 Asperasoft Aspera Shares 1.0.1 Asperasoft Aspera Proxy 1.2.2 Asperasoft Aspera Point to Point 3.5.1 Asperasoft Aspera Outlook Plugin 0 Asperasoft Aspera Orchestrator 0 Asperasoft Aspera OnDemand for Softlayer 0 Asperasoft Aspera OnDemand for Google Cloud 0 Asperasoft Aspera OnDemand for Azure 0 Asperasoft Aspera OnDemand for Amazon 0 Asperasoft Aspera Mobile 0 Asperasoft Aspera Faspex 3.7.7 Asperasoft Aspera Faspex 3.7.5 Asperasoft Aspera Faspex 3.0.3 Asperasoft Aspera Enterprise Server 3.5.1 Asperasoft Aspera Drive 0 Asperasoft Aspera Console 2.3.1 Asperasoft Aspera Console 2.3 Asperasoft Aspera Console 2.0.1 Asperasoft Aspera Connect Server 3.5.1 Asperasoft Aspera Client 0 Apple Xcode 6.0.1 Apple Xcode 2.4.1 Apple Xcode 6.3 Apple Xcode 6.2 Apple Xcode 6.0 Apple Xcode 5.0 Apple Xcode 4.4 Apple Xcode 4.3.3 Apple Xcode 4.3.2 Apple Xcode 4.3.1 Apple Xcode 4.3 Apple Xcode 4.2.1 Apple Xcode 4.2 Apple Xcode 4.1.1 Apple Xcode 4.0.2 Apple Xcode 4.0.1 Apple Xcode 3.2.5 Apple Xcode 3.2.4 Apple Xcode 3.2.3 Apple Xcode 3.2.2 Apple Xcode 3.2.1 Apple Xcode 3.1.4 Apple Xcode 3.1.3 Apple Xcode 3.1.2 Apple Xcode 3.1.1 Apple Xcode 3.1 Apple Xcode 3.0 Apple Xcode 2.3 Apple Xcode 2.2 Apple Xcode 2.1 Apple Xcode 2.0 Apple Mac Os X 10.10.5 Apple Mac OS X 10.10 Apple Mac OS X 10.9.5 Apple Mac OS X 10.8.5 Apple Mac Os X 10.10.4 Apple Mac OS X 10.10.1

Not Vulnerable:	VMWare Esxi 5.5 ESXi550-20150110 Splunk Splunk 6.0.7 Splunk Splunk 5.0.11 OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 0.9.8zc IBM Upward Integration Modules (UIM) SCVMM Add-in 1.0.3 IBM Upward Integration Modules (UIM) Integrated Installer 5.5.3 IBM Upward Integration Modules (UIM) Hardware Management Pack 5.5.3 IBM Upward Integration Modules (UIM) for VMware vSphere 3.5.3 IBM Upward Integration Modules (UIM) for Microsoft System Center 5.5.3 IBM Sterling Connect:Express for UNIX 1.5.0.11 iFix 150-11 IBM Sterling Connect:Express for UNIX 1.4.6.1 iFix 146-109 IBM SDK for Node.js 1.1.0.9 IBM NeXtScale n1200 Enclosure Fan Power Controller FHET24J-2.10 IBM Local Console Manager (LCM8) 1.2.40.00 IBM Local Console Manager (LCM16) 1.2.40.00 IBM Global Console Manager (GCM32) 1.26.1.23978 IBM Global Console Manager (GCM16) 1.26.1.23978 IBM Flex System IB6131 40Gb Infiniband Switch 3.4.1110 IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru 9.1.5.03.00 IBM Flex System EN6131 40Gb Ethernet Switch 3.4.1110 IBM Flex System Chassis Management Module (CMM) 2.5.3T (2PET12T) IBM BladeCenter Advanced Management Module 3.66N (BPET66N) IBM BladeCenter Advanced Management Module 3.66N (BPEO66N) IBM BladeCenter Advanced Management Module 3.66N (BBET66N) HP VSR1000 R0204P01 HP Version Control Repository Manager 7.5.1 HP Systems Insight Manager 7.5.1 HP System Management Homepage 7.5.5 HP System Management Homepage 7.4.1 HP SSL for OpenVMS 1.4-495 HP Server Migration Pack 7.5.1 HP OneView 1.20 HP MSR2000 R0106P18 HP MSM 6.5 6.5.1.0 HP MSM 6.4 6.4.2.1 HP MSM 6.3 6.3.1.0 HP MSM 6.2 6.2.1.2 HP Matrix Operating Environment 7.5.1 HP Insight Control server provisioning 7.4.1 HP Insight Control server provisioning 7.5.1 HP Insight Control 7.5.1 HP iMC UAM 7.1 E0302P07 HP CloudSystem Foundation 8.1.2 HP CloudSystem Enterprise software 8.1.2 HP BladeSystem c-Class Onboard Administrator 4.40 HP 7900 R2122 HP 5920 Switch Series R2311P05 HP 5900 Switch Series R2311P05 HP 5700 R2311P05 HP 5130 EI switch Series R3108P03 HP 12900 Switch Series R1005P15 HP 12500(Comware v7) R7328P04 HP 11900 Switch Series R2111P06 Bluecoat SSL Visibility 3.8.2F Bluecoat Security Analytics Platform 7.1.6 Bluecoat Security Analytics Platform 6.6.10 Bluecoat ProxySG SGOS 6.5.6.1 Bluecoat PolicyCenter 9.2.10 Bluecoat PacketShaper 9.2.10 Bluecoat Norman Shark SCADA Protection 5.3.2 Bluecoat Norman Shark SCADA Protection 5.2.3 Bluecoat Norman Shark Network Protection 5.3.2 Bluecoat Norman Shark Network Protection 5.2.3 Bluecoat Norman Shark Industrial Control System Protection 5.2.3 Bluecoat Director 6.1.16.1 Bluecoat Content Analysis System 1.2.3.1 Asperasoft Aspera Shares 1.9 Asperasoft Aspera Proxy 1.2.3 Asperasoft Aspera Point to Point 3.5.2 Asperasoft Aspera Orchestrator 2.10 Asperasoft Aspera Faspex 3.9 Asperasoft Aspera Enterprise Server 3.5.2 Asperasoft Aspera Console 2.5.3 Asperasoft Aspera Connect Server 3.5.2 Apple Xcode 7.0 Apple Mac OS X 10.10.2

Discussion

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

OpenSSL is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

OpenSSL prior to 0.9.8zc, 1.0.0o, and 1.0.1j are vulnerable.

Exploit / POC

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Solution / Fix

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

References

OpenSSL Session Ticket Memory Leak Remote Denial of Service Vulnerability

References: