OpenSSL 'tasn_dec.c' Remote Memory Corruption Vulnerability

Bugtraq ID:	73227
Class:	Design Error
CVE:	CVE-2015-0287
Remote:	Yes
Local:	No
Published:	Mar 19 2015 12:00AM
Updated:	May 23 2017 04:24PM
Credit:	Emilia Käsper
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 10 SP4 LTSS Slackware Slackware Linux 14.1 Slackware Slackware Linux 14.0 Slackware Slackware Linux 13.37 Slackware Slackware Linux 13.1 Slackware Slackware Linux 13.0 S.u.S.E. openSUSE 13.2 Rockwell Automation Stratix 5900 0 Pexip Pexip Infinity 8.0 Pexip Pexip Infinity 7.0 Pexip Pexip Infinity 6.0 Pexip Pexip Infinity 5.0 Pexip Pexip Infinity 4.0 Pexip Pexip Infinity 3.0 Pexip Pexip Infinity 2.0 Pexip Pexip Infinity 1.0 Oracle Enterprise Manager Ops Center 12.1.0.1 Oracle Enterprise Manager Ops Center 12.1 Oracle Enterprise Manager Ops Center 11.1.3 Oracle Enterprise Manager Ops Center 11.1 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Oracle Endeca Server 7.4 Oracle Endeca Server 7.6.1.0.0 Oracle Endeca Server 7.5.1.1 Oracle Endeca Server 7.3.0 Oracle Business Intelligence Enterprise Edition 11.1.1.9 Oracle Business Intelligence Enterprise Edition 11.1.1.7 OpenSSL Project OpenSSL 1.0.2 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 1.0.1l OpenSSL Project OpenSSL 1.0.1k OpenSSL Project OpenSSL 1.0.1j OpenSSL Project OpenSSL 1.0.1i OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0q OpenSSL Project OpenSSL 1.0.0p OpenSSL Project OpenSSL 1.0.0o OpenSSL Project OpenSSL 1.0.0n OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0H OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8ze OpenSSL Project OpenSSL 0.9.8zd OpenSSL Project OpenSSL 0.9.8zc OpenSSL Project OpenSSL 0.9.8zb OpenSSL Project OpenSSL 0.9.8za OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8g OpenSSL Project OpenSSL 0.9.8f OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Juniper vGW 0 Juniper STRM/JSA 0 Juniper SRC Series 0 Juniper screenos 0 Juniper SBR Carrier 0 Juniper RingMaster Appliance 0 Juniper Pulse Secure 0 Juniper NSM 0 Juniper JUNOS Space 0 Juniper Junos OS 0 Juniper IDP 0 Juniper DDoS Secure 0 Juniper CTPOS 6.6R2 Juniper CTPOS 6.6R1 IBM Workload Deployer 3.1 7 IBM Workload Deployer 3.1 6 IBM Workload Deployer 3.1 2 IBM Workload Deployer 3.1 1 IBM Workload Deployer 3.1 IBM WebSphere Message Broker 8.0 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.4 Fp-25 Sp-02 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM TSSC/IMC 7.5 IBM TSSC/IMC 7.4 IBM Tivoli Workload Scheduler for Applications 8.6 IBM Tivoli Workload Scheduler for Applications 8.5 FP01 IBM Tivoli Workload Scheduler for Applications 8.5 IBM Tivoli Workload Scheduler for Applications 8.4 FP02 IBM Tivoli Workload Scheduler for Applications 8.4 IBM Tivoli Workload Scheduler for Applications 8.0 IBM Tivoli Netcool/Reporter 2.2 IBM Tivoli Netcool System Service Monitor 4.0.1 FP2 IBM Tivoli Netcool System Service Monitor 4.0.1 FP1 IBM Tivoli Netcool System Service Monitor 4.0.0 FP14 IBM Tivoli Netcool System Service Monitor 4.0.0 FP1 IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 3 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.5 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Sterling Integrator 5.1 IBM Sterling Connect:Direct for UNIX 4.1 IBM Sterling Connect:Direct for UNIX 4.0 IBM Sterling B2B Integrator 5.2 IBM SONAS 1.4 1 IBM SONAS 1.3.2 1 IBM SONAS 1.5.2.0 IBM SONAS 1.5.1.3 IBM SONAS 1.5.0.2 IBM SONAS 1.5.0.1 IBM SONAS 1.5.0.0 IBM SONAS 1.5 IBM SONAS 1.4.3.4 IBM SONAS 1.4.3.3 IBM SONAS 1.4.3.2 IBM SONAS 1.4.3.0 IBM SONAS 1.4.2.1 IBM SONAS 1.4.2.0 IBM SONAS 1.4.1.1 IBM SONAS 1.4.1.0 IBM SONAS 1.4.0.0 IBM SONAS 1.4 IBM SONAS 1.3.2.3 IBM SONAS 1.3.2.0 IBM SONAS 1.3.1.0 IBM SONAS 1.3.0.5 IBM SONAS 1.3.0.0 IBM SmartCloud Entry 3.2 Fix Pack 11 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.2.0.4 fix pack 11 IBM SmartCloud Entry 3.2.0.4 IBM SmartCloud Entry 3.2.0.3 IBM SmartCloud Entry 3.2.0.2 IBM SmartCloud Entry 3.2.0.1 IBM SmartCloud Entry 3.2.0 fix pack 9 IBM SmartCloud Entry 3.2.0 fix pack 8 IBM SmartCloud Entry 3.2.0 fix pack 10 IBM Service Delivery Manager 7.2.4 IBM Service Delivery Manager 7.2.2 IBM Service Delivery Manager 7.2.1 IBM Security Proventia Network Enterprise Scanner 2.3 IBM Security Proventia Network Active Bypass 3.0 IBM Security Network Protection 5.3 IBM Security Network Protection 5.2.0 IBM Security Network Intrusion Prevention System 4.6.2 IBM Security Network Intrusion Prevention System 4.6.1 IBM Security Network Intrusion Prevention System 4.6 IBM Security Network Intrusion Prevention System 4.5 IBM Security Network Intrusion Prevention System 4.4 IBM Security Network Intrusion Prevention System 4.3 IBM Security Network Controller 1.0.3381 IBM Security Network Controller 1.0.3379 IBM Security Network Controller 1.0.3376 IBM Security Network Controller 1.0.3361 IBM Security Network Controller 1.0.1768 IBM Security Network Controller 1.0.1209 IBM Security Network Controller 1.0.913 IBM Security Network Controller 1.0.3381M IBM Security Network Controller 1.0.3379M IBM Security Network Controller 1.0.3376M IBM Security Network Controller 1.0.3361M IBM Security Network Controller 1.0.3352M IBM Security Network Controller 1.0.3350M IBM Security Access Manager for Web 8.0.1.2 IBM Security Access Manager for Web 8.0.1.1 IBM Security Access Manager for Web 8.0.1.0 IBM Security Access Manager for Web 8.0.0.5 IBM Security Access Manager for Web 8.0.0.4 IBM Security Access Manager for Web 8.0.0.2 IBM Security Access Manager for Web 8.0 IBM Security Access Manager for Web 7.0 IBM Security Access Manager for Mobile 8.0.1 IBM Security Access Manager for Mobile 8.0.1.2 IBM Security Access Manager for Mobile 8.0.0.5 IBM Security Access Manager for Mobile 8.0.0.4 IBM Security Access Manager for Mobile 8.0.0.3 IBM Security Access Manager for Mobile 8.0.0.2 IBM Security Access Manager for Mobile 8.0.0.1 IBM Security Access Manager for Mobile 8.0 IBM SDK for Node.js 1.1.0.9 IBM SDK for Node.js 1.1.0.7 IBM SDK for Node.js 1.1.0.6 IBM SDK for Node.js 1.1.0.5 IBM SDK for Node.js 1.1.0.3 IBM SDK for Node.js 1.1.0.2 IBM SDK for Node.js 1.1.0.12 IBM SDK for Node.js 1.1 IBM Sametime Unified Telephony 8.5.2 IBM Sametime Unified Telephony 9.0 IBM Sametime Community Server 9 Limited Use IBM Sametime Community Server 9 HF1 IBM Sametime 9.0.0.1 IBM Sametime 9.0.0.0 IBM Sametime 8.5.2.1 IBM Sametime 8.5.2.0 IBM Real-time Compression Appliance 3.8 IBM Real-time Compression Appliance 4.1 IBM Real-time Compression Appliance 3.9 IBM Rational Software Architect for WebSphere Software 9.1.1 IBM Rational Software Architect for WebSphere Software 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Reporting for Development Intelligence 2.0.6 IBM Rational Reporting for Development Intelligence 2.0.5 IBM Rational Reporting for Development Intelligence 5.0.2 IBM Rational Reporting for Development Intelligence 5.0.1 IBM Rational Reporting for Development Intelligence 5.0 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1.6 IBM Rational Insight 1.1.1.4 IBM Rational Developer for i 9.1.1 IBM Rational Developer for i 9.1.1.1 IBM Rational Developer for i 9.1 IBM Rational Application Developer for WebSphere 9.1.1 IBM Rational Application Developer for WebSphere 9.1.0.1 IBM Rational Application Developer for WebSphere 9.1 IBM QRadar Security Information and Event Manager 7.2.4 Patch 4 IBM QRadar Security Information and Event Manager 7.2.4 Patch 3 IBM QRadar Security Information and Event Manager 7.2.4 Patch 2 IBM QRadar Security Information and Event Manager 7.2.4 Patch 1 IBM QRadar Security Information and Event Manager 7.2.4 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 9 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 8 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 7 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 6 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 5 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 4 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 3 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 2 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 10 IBM QRadar Security Information and Event Manager 7.1 MR2 Patch 1 IBM QRadar Security Information and Event Manager 7.1 MR2 IBM QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module 7.10.1.31.00 IBM PureApplication System 1.1 4 IBM PureApplication System 1.1 3 IBM PureApplication System 1.1 1 IBM PureApplication System 1.1 0 IBM PureApplication System 1.0 4 IBM PureApplication System 1.0 3 IBM PureApplication System 1.0 2 IBM PureApplication System 1.0 1 IBM PureApplication System 2.1 IBM PureApplication System 2.0.0.1 IBM PureApplication System 2.0 IBM PureApplication System 1.1.0.5 IBM PureApplication System 1.1.0.2 IBM PureApplication System 1.1 IBM PureApplication System 1.0 IBM PowerKVM 2.1 IBM Power HMC 8.2.0.0 IBM Power HMC 8.1.0.0 IBM Power HMC 7.7.9.0 IBM Power HMC 7.7.8.0 IBM Power HMC 7.7.3.0 IBM Lotus Protector for Mail Security 2.8 0 IBM Lotus Protector for Mail Security 2.8.1.0 IBM Integration Bus 9.0 IBM Informix Genero 2.50 IBM Informix Genero 2.41 IBM Informix Genero 2.40 IBM Informix Genero 2.32 IBM Image Construction and Composition Tool 2.3.2.0 IBM Image Construction and Composition Tool 2.3.1.0 IBM Image Construction and Composition Tool 2.2.1.3 IBM i operating systems 6.1 IBM i Operating System 7.2 IBM i Operating System 7.1 IBM General Parallel File System (GPFS) 3.5.0 IBM Flex System FC5022 16Gb SAN Scalable Switch 7.3.0a IBM Flex System FC5022 16Gb SAN Scalable Switch 7.2.1c IBM Flex System FC5022 16Gb SAN Scalable Switch 7.2.0d5 IBM Flex System FC5022 16Gb SAN Scalable Switch 7.0 IBM Flex System EN4023 10Gb Scalable Switch 5.0 IBM FileNet System Monitor 4.5 IBM Enterprise Content Management System Monitor 5.2 IBM Enterprise Content Management System Monitor 5.1 IBM DataPower Gateway 7.1.0.4 IBM DataPower Gateway 7.0.0.6 IBM DataPower Gateway 6.0.1.9 IBM DataPower Gateway 6.0.0.13 IBM Cognos Planning 10.1.1 IBM Cognos Planning 10.1 IBM Cognos Metrics Manager 10.2.2 IBM Cognos Metrics Manager 10.2.1 IBM Cognos Metrics Manager 10.2 IBM Cognos Insight 10.2.2 IBM Cognos Insight 10.2.1 IBM Cognos Insight 10.2 IBM Cloud Manager 4.2 IBM Cloud Manager 4.1 IBM Cloud Manager 4.2.0.2 IBM Cloud Manager 4.2.0.1 IBM Cloud Manager 4.1.0.4 IBM Cloud Manager 4.1.0.3 IBM Cloud Manager 4.1.0.2 IBM Cloud Manager 4.1.0.1 IBM BladeCenter(TM)-T 8730 IBM BladeCenter(TM)-T 8720 IBM BladeCenter(TM)-S 8886 IBM BladeCenter(TM)-S 7779 IBM BladeCenter(TM)-S 1948 IBM BladeCenter(TM)-HT 8750 IBM BladeCenter(TM)-HT 8740 IBM BladeCenter(TM)-H 8852 IBM BladeCenter(TM)-H 7989 IBM BladeCenter(TM)-H 1886 IBM BladeCenter(TM)-E 8677 IBM BladeCenter(TM)-E 7967 IBM BladeCenter(TM)-E 1881 IBM BladeCenter T Advanced Management Module 32R0835 IBM BladeCenter Advanced Management Module 25R5778 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP Virtual Connect Enterprise Manager SDK 7.4.1 HP Virtual Connect Enterprise Manager SDK 7.4 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Agent 7.3.4 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2.1 HP Version Control Agent 7.2 HP Version Control Agent 7.3.2 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.4.0a HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3.0a HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP System Management Homepage (SMH) 7.4 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 7.4.0a HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP Insight Orchestration 0 HP IceWall SSO Dfw 8.0 R3 HP IceWall SSO Dfw 8.0 R2 HP IceWall SSO Dfw 8.0 R1 HP IceWall SSO Dfw 8.0 HP IceWall SSO Dfw 10.0 HP IceWall SSO Agent Option 8.0 2007 Update Rele HP IceWall SSO Agent Option 8.0 2007 HP IceWall SSO Agent Option 8 HP IceWall MCRP 3.0 HP IceWall MCRP 2.1 SP2 HP IceWall MCRP 2.1 SP1 HP IceWall MCRP 2.1 HP HP-UX B.11.31 (11i v3) HP HP-UX B.11.23 (11i v2) HP HP-UX B.11.11 (11i v1) Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 CentOS CentOS 7 CentOS CentOS 6 CentOS CentOS 5 Avaya Session Border Controller for Enterprise 6.3.0 Avaya Proactive Contact 5.1 Avaya Proactive Contact 5.0 Avaya one-X Client Enablement Services 6.2 Avaya one-X Client Enablement Services 6.1.2 Avaya one-X Client Enablement Services 6.1.1 Avaya one-X Client Enablement Services 6.1 SP3 Avaya one-X Client Enablement Services 6.1 SP2 Avaya one-X Client Enablement Services 6.1 SP1 Avaya one-X Client Enablement Services 6.1 Avaya Message Networking 6.3 Avaya Message Networking 6.2.0 Avaya Message Networking 6.0 Avaya Meeting Exchange 6.2 Avaya Meeting Exchange 6.0 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.6 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.6 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.6 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.6 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya CMS 17.0 Avaya Aura Utility Services 6.3 SP7 Avaya Aura Utility Services 6.3 Avaya Aura Utility Services 6.2 Avaya Aura Utility Services 6.0 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2.1.0.9 Avaya Aura System Platform 6.2 SP1 Avaya Aura System Platform 6.2 Avaya Aura System Platform 6.0.3.9.3 Avaya Aura System Platform 6.0.3.8.3 Avaya Aura System Platform 6.0.3.0.3 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Manager 6.3.10 Avaya Aura System Manager 6.3.6 Avaya Aura System Manager 6.3.4 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3.3 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.4 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.7 Avaya Aura System Manager 6.1.5 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.5 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.0.1 Avaya Aura Session Manager 6.2.4 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1.7 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0.2 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.2 Avaya Aura Presence Services 6.1 SP2 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1.1 Avaya Aura Messaging 6.3 Avaya Aura Messaging 6.2 SP4 Avaya Aura Messaging 6.2 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 8.0 Avaya Aura Conferencing 7.2 SP7 Avaya Aura Conferencing 7.2 SP6 Avaya Aura Conferencing 7.2 Avaya Aura Conferencing 7.0 Avaya Aura Communication Manager 6.3.8 Avaya Aura Communication Manager 6.3 SSP04 Avaya Aura Communication Manager 6.3 Avaya Aura Communication Manager 6.2 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Server 5300 SIP Core 3.0 SP10 Avaya Aura Application Server 5300 SIP Core 3.0 PB5 Avaya Aura Application Server 5300 SIP Core 3.0 PB3 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.3 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.1.2 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 6.0 Asperasoft Aspera Shares 1.9 Asperasoft Aspera Shares 1.7.5 Asperasoft Aspera Shares 1.7.3 Asperasoft Aspera Shares 1.0.1 Asperasoft Aspera Shares 1.9.2 Asperasoft Aspera Proxy 1.2.3 Asperasoft Aspera Proxy 1.2.2 Asperasoft Aspera Orchestrator 2.2.1 Asperasoft Aspera OnDemand 3.5 Asperasoft Aspera Faspex 3.9 Asperasoft Aspera Faspex 3.7.7 Asperasoft Aspera Faspex 3.7.5 Asperasoft Aspera Faspex 3.0.3 Asperasoft Aspera Faspex 3.9.2 Asperasoft Aspera Enterprise Server 3.5.4 Asperasoft Aspera Enterprise Server 3.5.2 Asperasoft Aspera Enterprise Server 3.5.1 Asperasoft Aspera Drive 1.2.1 Asperasoft Aspera Console 2.5.3 Asperasoft Aspera Console 2.3.1 Asperasoft Aspera Console 2.3 Asperasoft Aspera Console 2.0.1 Asperasoft Aspera Console 3.0.0 Asperasoft Aspera Connect Server 3.5.4 Asperasoft Aspera Connect Server 3.5.2 Asperasoft Aspera Connect Server 3.5.1 Apple Mac Os X 10.10.5 Apple Mac OS X 10.10 Apple Mac OS X 10.9.5 Apple Mac OS X 10.9.1 Apple Mac OS X 10.8.5 Apple Mac OS X 10.8.4 Apple Mac OS X 10.8.2 Apple Mac OS X 10.8.1 Apple Mac OS X 10.8 Apple Mac OS X 10.7 Apple Mac OS X 10.9.4 Apple Mac OS X 10.9.3 Apple Mac OS X 10.9.2 Apple Mac OS X 10.9 Apple Mac OS X 10.8.3 Apple Mac OS X 10.7.5 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.1 Apple Mac OS X 10.6.8 Apple Mac Os X 10.10.4 Apple Mac Os X 10.10.3 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10 Apple iOS 8.4.1 Apple iOS 7.0.6 Apple iOS 7.0.3 Apple iOS 7.0.2 Apple iOS 7.0.1 Apple iOS 6.3.1 Apple iOS 6.1.6 Apple iOS 6.1.4 Apple iOS 6.1.3 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 8.4 Apple iOS 8.3 Apple iOS 8.2 Apple iOS 8.1.3 Apple iOS 8.1.2 Apple iOS 8.1.1 Apple iOS 8.1 Apple iOS 8 Apple iOS 7.1.2 Apple iOS 7.1.1 Apple iOS 7.1 Apple iOS 7.0.4 Apple iOS 7 Apple iOS 6.1 Apple iOS 6.0.2 Apple iOS 6.0.1 Apple iOS 6 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 AlienVault AlienVault 4.15.2 AlienVault AlienVault 4.15.1 AlienVault AlienVault 4.15 AlienVault AlienVault 4.14 AlienVault AlienVault 4.13 AlienVault AlienVault 4.12.1 AlienVault AlienVault 4.12
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3 Pexip Pexip Infinity 9.0 Oracle Enterprise Manager Ops Center 12.3 Oracle Enterprise Manager Ops Center 12.2.1 Oracle Enterprise Manager Ops Center 12.2 Oracle Enterprise Manager Ops Center 12.1.4 OpenSSL Project OpenSSL 1.0.2a OpenSSL Project OpenSSL 1.0.1m OpenSSL Project OpenSSL 1.0.0r OpenSSL Project OpenSSL 0.9.8zf Juniper CTPOS 7.0r4 IBM SDK for Node.js 1.1.0.13 IBM Rational Insight 1.1.1.7 IBM QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module 7.10.1.35.00 IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.0.0.1 Interim Fix IBM Flex System FC5022 16Gb SAN Scalable Switch 7.3.1 IBM Flex System EN4023 10Gb Scalable Switch 6.0 IBM FileNet System Monitor 4.5.0.3 Interim Fix IBM Enterprise Content Management System Monitor 5.2 Fix Pack 1 IBM Enterprise Content Management System Monitor 5.1.0.3 Interim Fix IBM DataPower Gateway 7.1.0.5 IBM DataPower Gateway 7.0.0.7 IBM DataPower Gateway 6.0.1.10 IBM DataPower Gateway 6.0.0.14 IBM Cognos Insight 10.2.2.4 HP Virtual Connect Enterprise Manager SDK 7.5.0 HP Version Control Repository Manager 7.5.0 HP Version Control Agent 7.3.5 HP Version Control Agent 7.5.0 HP Systems Insight Manager 7.5.0 HP System Management Homepage (SMH) 7.5 HP System Management Homepage 7.5 HP Insight Orchestration 7.5.0 Apple Mac Os X 10.11 Apple Mac Os X 10.10.4 Apple iOS 9 AlienVault AlienVault 5.0

OpenSSL 'tasn_dec.c' Remote Memory Corruption Vulnerability

OpenSSL is prone to a remote memory-corruption vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application to create a denial-of-service condition.

OpenSSL 'tasn_dec.c' Remote Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

OpenSSL 'tasn_dec.c' Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenSSL 'tasn_dec.c' Remote Memory Corruption Vulnerability

References:

• OpenSSL Project (OpenSSL Project)
  
• Security Advisory - AlienVault v5.0 addresses 21 vulnerabilities (AlienVault)
  
• Security Bulletin: Vulnerabilities in OpenSSL (Aspera)
  
• Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
  
• CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)
  
• HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabiliti (HP)
  
• HPSBGN03306 rev.1 - HP IceWall SSO MCRP, SSO Dfw, and SSO Agent running OpenSSL, (HP)
  
• HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multipl (HP)
  
• HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities (hp)
  
• HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service ( (HP)
  
• IBM Advisory ssg1S1005226 (IBM)
  
• IBM Advisory ssg1S1005241 (IBM)
  
• IBM Advisory ssg1S1005254 (IBM)
  
• IBM Advisory swg21958089 (IBM)
  
• IBM Advisory swg21962334 (IBM)
  
• IBM BladeCenter Advanced Management Module is affected by the following OpenSSL (IBM)
  
• IBM i is affected by several OpenSSL vulnerabilities. (IBM)
  
• IBM SECURITY ADVISORY AIX OpenSSL (IBM)
  
• Multiple vulnerabilities in OpenSSL affect IBM Security Access Manager for Mobil (IBM)
  
• openssl security update (RHSA-2015-0800) (Avaya)
  
• OpenSSL vulnerabilities (OpenSSL)
  
• Oracle Critical Patch Update Advisory - January 2016 (Oracle)
  
• pexip Security Bulletin: Multiple vulnerabilities (Pexip)
  
• Security Bulletin: IBM Cognos Planning is affected by multiple vulnerabilities (IBM)
  
• Security Bulletin: Multiple OpenSSL Vulnerabilities for IBM Protector for Mail S (IBM)
  
• Security Bulletin: Multiple Security Issues in IBM Media Server Due to OpenSSL I (IBM)
  
• Security Bulletin: OpenSSL 19th March 2015 advisory (Juniper)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect GPFS V3.5 for Windows (CVE- (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cloud Manager with Open (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM FileNet System Monitor/ (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC5022 16Gb (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM QRadar SIEM (CVE-2015-0 (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM SDK for Node.js (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Entry (CVE-2 (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling Connect:Direct (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect IBM Tivoli Netcool System S (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Power Hardware Management C (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM (Multiple CVEs) (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Proventia Network Active By (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Proventia Network Enterpris (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect QLogic 8Gb Intelligent Pass (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect Real-time Compression CVE-2 (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect the Cordova platform packag (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affect WebSphere Message Broker an (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affects IBM Image Construction and (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL affects IBM PureApplication System (IBM)
  
• Security Bulletin: Vulnerabilities in OpenSSL including ClientHello DoS affect I (IBM)
  
• Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-201 (IBM)
  
• Security Bulletin:Vulnerabilities in OpenSSL affect Tivoli Workload Scheduler Ap (IBM)
  
• swg21964686 - Security Bulletin: Vulnerabilities in OpenSSL affecting Sametime U (IBM)
  
• swg21970748: Security Bulletin: Vulnerabilities in OpenSSL affect Informix Gener (IBM)
  
• Vulnerabilities in OpenSSL affect IBM Security Access Manager for Web (IBM)
  
• Vulnerabilities in OpenSSL affect IBM Security Network Controller (CVE-2015-0209 (IBM)
  
• Vulnerabilities in OpenSSL affect IBM Service Delivery Manager. OpenSSL is insta (IBM)
  
• Vulnerabilities in OpenSSL affect IBM Tivoli Netcool/Reporter (CVE's: 2015-0209, (IBM)
  
• Vulnerabilities in OpenSSL affect Network Intrusion Prevention System (CVE-2015- (IBM)
  
• Vulnerabilities in OpenSSL affect Rational Insight (CVE-2015-0286, CVE-2015-0287 (IBM)
  
• Vulnerabilities in OpenSSL affect Rational Reporting for Development Intelligenc (IBM)
  
• Vulnerabilities in OpenSSL affects Rational Application Developer for WebSphere (IBM)
  
• Vulnerabilities in OpenSSL affects Rational Software Architect for Websphere Sof (IBM)