OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
BID:73228
Info
OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
| Bugtraq ID: | 73228 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2015-0292 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 19 2015 12:00AM |
| Updated: | May 23 2017 04:24PM |
| Credit: | Robert Dugal, and David Ramos. |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Rockwell Automation Stratix 5900 0 Oracle Enterprise Manager Ops Center 12.1.0.1 Oracle Enterprise Manager Ops Center 12.1 Oracle Enterprise Manager Ops Center 11.1.3 Oracle Enterprise Manager Ops Center 11.1 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Oracle Endeca Server 7.4 Oracle Endeca Server 7.6.1.0.0 Oracle Endeca Server 7.5.1.1 Oracle Endeca Server 7.3.0 Oracle Business Intelligence Enterprise Edition 11.1.1.9 Oracle Business Intelligence Enterprise Edition 11.1.1.7 OpenSSL Project OpenSSL 1.0 OpenSSL Project OpenSSL 0.9.8 k OpenSSL Project OpenSSL 0.9.8 j OpenSSL Project OpenSSL 0.9.8 i OpenSSL Project OpenSSL 0.9.8 h OpenSSL Project OpenSSL 0.9.8 e OpenSSL Project OpenSSL 0.9.8 d OpenSSL Project OpenSSL 0.9.8 c OpenSSL Project OpenSSL 0.9.8 b OpenSSL Project OpenSSL 0.9.8 a OpenSSL Project OpenSSL 0.9.8 OpenSSL Project OpenSSL 1.0.1g OpenSSL Project OpenSSL 1.0.1f OpenSSL Project OpenSSL 1.0.1e OpenSSL Project OpenSSL 1.0.1d OpenSSL Project OpenSSL 1.0.1c OpenSSL Project OpenSSL 1.0.1b OpenSSL Project OpenSSL 1.0.1a OpenSSL Project OpenSSL 1.0.1 OpenSSL Project OpenSSL 1.0.0L OpenSSL Project OpenSSL 1.0.0k OpenSSL Project OpenSSL 1.0.0j OpenSSL Project OpenSSL 1.0.0i OpenSSL Project OpenSSL 1.0.0g OpenSSL Project OpenSSL 1.0.0f OpenSSL Project OpenSSL 1.0.0e OpenSSL Project OpenSSL 1.0.0d OpenSSL Project OpenSSL 1.0.0c OpenSSL Project OpenSSL 1.0.0b OpenSSL Project OpenSSL 1.0.0a OpenSSL Project OpenSSL 0.9.8y OpenSSL Project OpenSSL 0.9.8X OpenSSL Project OpenSSL 0.9.8w OpenSSL Project OpenSSL 0.9.8U OpenSSL Project OpenSSL 0.9.8t OpenSSL Project OpenSSL 0.9.8s OpenSSL Project OpenSSL 0.9.8R OpenSSL Project OpenSSL 0.9.8Q OpenSSL Project OpenSSL 0.9.8p OpenSSL Project OpenSSL 0.9.8o OpenSSL Project OpenSSL 0.9.8n OpenSSL Project OpenSSL 0.9.8m OpenSSL Project OpenSSL 0.9.8l OpenSSL Project OpenSSL 0.9.8 f OpenSSL Project OpenSSL 0.9.8v Juniper vGW 0 Juniper SRC Series 0 Juniper screenos 0 Juniper SBR Carrier 0 Juniper RingMaster Appliance 0 Juniper Pulse Secure 0 Juniper NSM 0 Juniper JUNOS Space 0 Juniper Junos OS 0 Juniper IDP 0 Juniper DDoS Secure 0 Juniper CTPOS 6.6R2 Juniper CTPOS 6.6R1 IBM WebSphere Message Broker 8.0 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.4 Fp-25 Sp-02 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM TSSC/IMC 7.5 IBM TSSC/IMC 7.4 IBM TotalStorage SAN256B Director Model M48 0 IBM System Storage SAN80B-4 0 IBM System Storage SAN768B-2 0 IBM System Storage SAN768B 0 IBM System Storage SAN48B-5 0 IBM System Storage SAN42B-R 0 IBM System Storage SAN40B-4 0 IBM System Storage SAN384B-2 0 IBM System Storage SAN384B 0 IBM System Storage SAN24B-4 0 IBM System Storage SAN06B-R 0 IBM System Storage SAN04B-R 0 IBM System Networking SAN96B-5 0 IBM System Networking SAN24B-5 0 IBM Storwize V7000 Unified 1.4.3 4 IBM Storwize V7000 Unified 1.4.3 3 IBM Storwize V7000 Unified 1.4.3 2 IBM Storwize V7000 Unified 1.4 1 IBM Storwize V7000 Unified 1.4 0 IBM Storwize V7000 Unified 1.3.2 3 IBM Storwize V7000 Unified 1.3.2 1 IBM Storwize V7000 Unified 1.3.2 0 IBM Storwize V7000 Unified 1.5.2.0 IBM Storwize V7000 Unified 1.5.1.3 IBM Storwize V7000 Unified 1.5.0.2 IBM Storwize V7000 Unified 1.5.0.1 IBM Storwize V7000 Unified 1.5.0.0 IBM Storwize V7000 Unified 1.5 IBM Storwize V7000 Unified 1.4.3.0 IBM Storwize V7000 Unified 1.4.2.1 IBM Storwize V7000 Unified 1.4.2.0 IBM Storwize V7000 Unified 1.4.1.1 IBM Storwize V7000 Unified 1.4.1.0 IBM Storwize V7000 Unified 1.4 IBM Storwize V7000 Unified 1.3.1.0 IBM Storwize V7000 Unified 1.3.0.5 IBM Storwize V7000 Unified 1.3.0.0 IBM Sterling Integrator 5.1 IBM Sterling Connect:Express for UNIX 1.5.0 IBM Sterling Connect:Express for UNIX 1.4.6 IBM Sterling Connect:Direct for UNIX 4.1 IBM Sterling Connect:Direct for UNIX 4.0 IBM Sterling B2B Integrator 5.2 IBM SONAS 1.4 1 IBM SONAS 1.3.2 1 IBM SONAS 1.5.2.0 IBM SONAS 1.5.1.3 IBM SONAS 1.5.0.2 IBM SONAS 1.5.0.1 IBM SONAS 1.5.0.0 IBM SONAS 1.5 IBM SONAS 1.4.3.4 IBM SONAS 1.4.3.3 IBM SONAS 1.4.3.2 IBM SONAS 1.4.3.0 IBM SONAS 1.4.2.1 IBM SONAS 1.4.2.0 IBM SONAS 1.4.1.1 IBM SONAS 1.4.1.0 IBM SONAS 1.4.0.0 IBM SONAS 1.4 IBM SONAS 1.3.2.3 IBM SONAS 1.3.2.0 IBM SONAS 1.3.1.0 IBM SONAS 1.3.0.5 IBM SONAS 1.3.0.0 IBM SmartCloud Entry 3.2 Fix Pack 11 IBM SmartCloud Entry 3.2 IBM SmartCloud Entry 3.2.0.4 fix pack 11 IBM SmartCloud Entry 3.2.0.4 IBM SmartCloud Entry 3.2.0.3 IBM SmartCloud Entry 3.2.0.2 IBM SmartCloud Entry 3.2.0.1 IBM SmartCloud Entry 3.2.0 fix pack 9 IBM SmartCloud Entry 3.2.0 fix pack 8 IBM SmartCloud Entry 3.2.0 fix pack 10 IBM Security Virtual Server Protection for VMware 1.1.1 IBM Security Virtual Server Protection for VMware 1.1.0.1 IBM Security Virtual Server Protection for VMware 1.1 IBM Security Proventia Network Enterprise Scanner 2.3 IBM Security Proventia Network Active Bypass 3.0 IBM Security Network Protection 5.3 IBM Security Network Protection 5.2.0 IBM Security Access Manager for Web 8.0.1.2 IBM Security Access Manager for Web 8.0.1.1 IBM Security Access Manager for Web 8.0.1.0 IBM Security Access Manager for Web 8.0.0.5 IBM Security Access Manager for Web 8.0.0.4 IBM Security Access Manager for Web 8.0.0.2 IBM Security Access Manager for Web 8.0 IBM Security Access Manager for Web 7.0 IBM Security Access Manager for Mobile 8.0.1 IBM Security Access Manager for Mobile 8.0.1.2 IBM Security Access Manager for Mobile 8.0.0.5 IBM Security Access Manager for Mobile 8.0.0.4 IBM Security Access Manager for Mobile 8.0.0.3 IBM Security Access Manager for Mobile 8.0.0.2 IBM Security Access Manager for Mobile 8.0.0.1 IBM Security Access Manager for Mobile 8.0 IBM SDK for Node.js 1.1.0.9 IBM SDK for Node.js 1.1.0.7 IBM SDK for Node.js 1.1.0.6 IBM SDK for Node.js 1.1.0.5 IBM SDK for Node.js 1.1.0.3 IBM SDK for Node.js 1.1.0.2 IBM SDK for Node.js 1.1.0.12 IBM SDK for Node.js 1.1 IBM Sametime Community Server 9 Limited Use IBM Sametime Community Server 9 HF1 IBM Sametime 9.0.0.1 IBM Sametime 9.0.0.0 IBM Sametime 8.5.2.1 IBM Sametime 8.5.2.0 IBM Real-time Compression Appliance 3.8 IBM Real-time Compression Appliance 4.1 IBM Real-time Compression Appliance 3.9 IBM Rational Tau 4.3 6 IBM Rational Tau 4.3 5 IBM Rational Tau 4.3 4 IBM Rational Tau 4.3 3 IBM Rational Tau 4.3 2 IBM Rational Tau 4.3 1 IBM Rational Tau 4.3.0.6 Interim Fix IBM Rational Tau 4.3.0.6 Interim Fix IBM Rational Tau 4.3 IBM Rational Software Architect for WebSphere Software 9.1.1 IBM Rational Software Architect for WebSphere Software 9.1 IBM Rational Software Architect 9.1.1 IBM Rational Software Architect 9.1 IBM Rational Developer for i 9.1.1 IBM Rational Developer for i 9.1.1.1 IBM Rational Developer for i 9.1 IBM Rational Application Developer for WebSphere 9.1.1 IBM Rational Application Developer for WebSphere 9.1.0.1 IBM Rational Application Developer for WebSphere 9.1 IBM QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module 7.10.1.31.00 IBM PureApplication System 1.1 4 IBM PureApplication System 1.1 3 IBM PureApplication System 1.1 1 IBM PureApplication System 1.1 0 IBM PureApplication System 1.0 4 IBM PureApplication System 1.0 3 IBM PureApplication System 1.0 2 IBM PureApplication System 1.0 1 IBM PureApplication System 2.1 IBM PureApplication System 2.0.0.1 IBM PureApplication System 2.0 IBM PureApplication System 1.1.0.5 IBM PureApplication System 1.1.0.2 IBM PureApplication System 1.1 IBM PureApplication System 1.0 IBM PredictiveInsight 9.0 IBM PredictiveInsight 8.6 IBM PredictiveInsight 8.5 IBM PredictiveInsight 8.3 IBM PredictiveInsight 8.2 IBM PredictiveInsight 8.1 IBM PredictiveInsight 7.0 IBM PowerKVM 2.1 IBM Power HMC 8.2.0.0 IBM Power HMC 8.1.0.0 IBM Power HMC 7.7.9.0 IBM Power HMC 7.7.8.0 IBM Power HMC 7.7.3.0 IBM Netezza Platform Software 7.1 2 IBM Netezza Platform Software 7.0.4 5 IBM Netezza Platform Software 7.0.2 13 IBM Netezza Platform Software 7.2.0.4-P2 IBM Netezza Platform Software 7.2.0.3 IBM Netezza Platform Software 7.2 IBM Netezza Platform Software 7.1.0.5-P2 IBM Netezza Platform Software 7.1.0.4-P1 IBM Netezza Platform Software 7.1.0.1 IBM Netezza Platform Software 7.1 IBM Netezza Platform Software 7.0.4.8-P2 IBM Netezza Platform Software 7.0.4.8-P1 IBM Netezza Platform Software 7.0.4.7-P1 IBM Netezza Platform Software 7.0.2.16-P2 IBM Netezza Platform Software 7.0.2.16-P1 IBM Netezza Platform Software 7.0.2.15-P1 IBM Messagesight 1.2 IBM Messagesight 1.1 IBM MessageSight 1.0 IBM Lotus Protector for Mail Security 2.8 0 IBM Lotus Protector for Mail Security 2.8.1.0 IBM Integration Bus 9.0 IBM InfoSphere Guardium for Applications 0 IBM InfoSphere Guardium Database Activity Monitoring 9.0 IBM InfoSphere Guardium Database Activity Monitoring 8.2 IBM Informix Genero 2.50 IBM Informix Genero 2.41 IBM Informix Genero 2.40 IBM Informix Genero 2.32 IBM Image Construction and Composition Tool 2.3.2.0 IBM Image Construction and Composition Tool 2.3.1.0 IBM Image Construction and Composition Tool 2.2.1.3 IBM IBM InfoSphere Information Server 9.1 IBM IBM InfoSphere Information Server 8.7 IBM IBM InfoSphere Information Server 8.5 IBM IBM InfoSphere Information Server 11.3 IBM i operating systems 6.1 IBM i Operating System 7.2 IBM i Operating System 7.1 IBM General Parallel File System (GPFS) 3.5.0 IBM Flex System FC5022 16Gb SAN Scalable Switch 7.3.0a IBM Flex System FC5022 16Gb SAN Scalable Switch 7.2.1c IBM Flex System FC5022 16Gb SAN Scalable Switch 7.2.0d5 IBM Flex System FC5022 16Gb SAN Scalable Switch 7.0 IBM Flex System EN4023 10Gb Scalable Switch 5.0 IBM FileNet System Monitor 4.5 IBM Enterprise Content Management System Monitor 5.2 IBM Enterprise Content Management System Monitor 5.1 IBM Endpoint Manager for Remote Control 9.1.0 IBM Endpoint Manager for Remote Control 9.0.1 IBM Encryption Switch 0 IBM DataPower Gateway 7.0.0.6 IBM DataPower Gateway 7.0.0.4 IBM DataPower Gateway 6.0.1.9 IBM DataPower Gateway 6.0.0.13 IBM ContactOptimization 9.1.1 IBM ContactOptimization 9.1 IBM ContactOptimization 9.0 IBM ContactOptimization 8.6 IBM ContactOptimization 8.5 IBM ContactOptimization 8.3 IBM ContactOptimization 8.2 IBM ContactOptimization 8.1 IBM ContactOptimization 8.0 IBM ContactOptimization 7.6 IBM ContactOptimization 7.5 IBM ContactOptimization 7.4 IBM ContactOptimization 7.3 IBM ContactOptimization 7.2 IBM ContactOptimization 7.1 IBM ContactOptimization 7.0 IBM Cloud Manager 4.2 IBM Cloud Manager 4.1 IBM Cloud Manager 4.2.0.2 IBM Cloud Manager 4.2.0.1 IBM Cloud Manager 4.1.0.4 IBM Cloud Manager 4.1.0.3 IBM Cloud Manager 4.1.0.2 IBM Cloud Manager 4.1.0.1 IBM Campaign 9.1.1 IBM Campaign 9.1 1 IBM Campaign 9.1 0 IBM Campaign 9.1 IBM Campaign 9.1.0.4 IBM Campaign 9.1 IBM Campaign 9.0 IBM Campaign 8.6 IBM Campaign 8.5 IBM Campaign 8.3 IBM Campaign 8.2 IBM Campaign 8.1 IBM Campaign 8.0 IBM Campaign 7.6 IBM Campaign 7.5 IBM Campaign 7.4 IBM Campaign 7.3 IBM Campaign 7.2 IBM Campaign 7.1 IBM Campaign 7.0 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 HP Virtual Connect Enterprise Manager SDK 7.4.1 HP Virtual Connect Enterprise Manager SDK 7.4 HP Version Control Repository Manager 7.4.1 HP Version Control Repository Manager 7.4 HP Version Control Repository Manager 7.3.4 HP Version Control Repository Manager 7.3.1 HP Version Control Repository Manager 7.3 HP Version Control Repository Manager 7.2.2 HP Version Control Repository Manager 7.2.1 HP Version Control Repository Manager 7.2 HP Version Control Repository Manager 7.4.0a HP Version Control Repository Manager 7.3.3 HP Version Control Repository Manager 7.3.2 HP Version Control Agent 7.3.4 HP Version Control Agent 7.3.3 HP Version Control Agent 7.3.1 HP Version Control Agent 7.3 HP Version Control Agent 7.2.2 HP Version Control Agent 7.2.1 HP Version Control Agent 7.2 HP Version Control Agent 7.3.2 HP Systems Insight Manager 7.1.1 HP Systems Insight Manager 7.4.0a HP Systems Insight Manager 7.4 HP Systems Insight Manager 7.3.2 HP Systems Insight Manager 7.3.1 HP Systems Insight Manager 7.3.0a HP Systems Insight Manager 7.3 HP Systems Insight Manager 7.2.2 HP Systems Insight Manager 7.2.1 HP Systems Insight Manager 7.2 HP Systems Insight Manager 7.0 HP System Management Homepage (SMH) 7.4 HP System Management Homepage 7.4.1 HP System Management Homepage 7.3.2 HP System Management Homepage 7.2.3 HP System Management Homepage 7.2.2 HP System Management Homepage 7.2.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1.2 HP System Management Homepage 7.1.1 HP System Management Homepage 7.4.0a HP System Management Homepage 7.4 HP System Management Homepage 7.3.3.1 HP System Management Homepage 7.3.1 HP System Management Homepage 7.3 HP System Management Homepage 7.2.4.1 HP System Management Homepage 7.2 HP System Management Homepage 7.1 HP System Management Homepage 7.0 HP Insight Orchestration 0 HP HP-UX B.11.31 (11i v3) HP HP-UX B.11.23 (11i v2) HP HP-UX B.11.11 (11i v1) Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix NetScaler T1 0 Citrix NetScaler Service Delivery Appliance 0 Citrix NetScaler Gateway 0 Citrix NetScaler Application Delivery Controller (ADC) 0 Citrix Command Center Appliance 0 Citrix CloudBridge 0 CentOS CentOS 7 CentOS CentOS 6 CentOS CentOS 5 Avaya Session Border Controller for Enterprise 6.3.0 Avaya Proactive Contact 5.1 Avaya Proactive Contact 5.0 Avaya one-X Client Enablement Services 6.2 Avaya one-X Client Enablement Services 6.1.2 Avaya one-X Client Enablement Services 6.1.1 Avaya one-X Client Enablement Services 6.1 SP3 Avaya one-X Client Enablement Services 6.1 SP2 Avaya one-X Client Enablement Services 6.1 SP1 Avaya one-X Client Enablement Services 6.1 Avaya Message Networking 6.3 Avaya Message Networking 6.2.0 Avaya Message Networking 6.0 Avaya Meeting Exchange 6.2 Avaya Meeting Exchange 6.0 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya IP Office Server Edition 9.0 Avaya IP Office Server Edition 8.1 Avaya IP Office Application Server 9.0 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Communication Server 1000M Signaling Server 7.6 Avaya Communication Server 1000M Signaling Server 7.5 Avaya Communication Server 1000M Signaling Server 7.0 Avaya Communication Server 1000M 7.6 Avaya Communication Server 1000M 7.5 Avaya Communication Server 1000M 7.0 Avaya Communication Server 1000E Signaling Server 7.6 Avaya Communication Server 1000E Signaling Server 7.5 Avaya Communication Server 1000E Signaling Server 7.0 Avaya Communication Server 1000E 7.6 Avaya Communication Server 1000E 7.5 Avaya Communication Server 1000E 7.0 Avaya CMS R16 Avaya CMS 17.0 Avaya Aura Utility Services 6.3 SP7 Avaya Aura Utility Services 6.3 Avaya Aura Utility Services 6.2 Avaya Aura Utility Services 6.0 Avaya Aura System Platform 6.2.2 Avaya Aura System Platform 6.2.1 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.3 Avaya Aura System Platform 6.2.1.0.9 Avaya Aura System Platform 6.2 SP1 Avaya Aura System Platform 6.2 Avaya Aura System Platform 6.0.3.9.3 Avaya Aura System Platform 6.0.3.8.3 Avaya Aura System Platform 6.0.3.0.3 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Manager 6.3.10 Avaya Aura System Manager 6.3.6 Avaya Aura System Manager 6.3.4 Avaya Aura System Manager 6.3.2 Avaya Aura System Manager 6.3.1 Avaya Aura System Manager 6.3.3 Avaya Aura System Manager 6.3 Avaya Aura System Manager 6.2.4 Avaya Aura System Manager 6.2.3 Avaya Aura System Manager 6.2 SP3 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.7 Avaya Aura System Manager 6.1.5 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura Session Manager 6.2.1 Avaya Aura Session Manager 6.1.5 Avaya Aura Session Manager 6.1.3 Avaya Aura Session Manager 6.1.2 Avaya Aura Session Manager 6.1.1 Avaya Aura Session Manager 6.0.1 Avaya Aura Session Manager 6.2.4 Avaya Aura Session Manager 6.2.3 Avaya Aura Session Manager 6.2.2 Avaya Aura Session Manager 6.2 SP1 Avaya Aura Session Manager 6.2 Avaya Aura Session Manager 6.1.7 Avaya Aura Session Manager 6.1 SP2 Avaya Aura Session Manager 6.1 Sp1 Avaya Aura Session Manager 6.1 Avaya Aura Session Manager 6.0.2 Avaya Aura Session Manager 6.0 SP1 Avaya Aura Session Manager 6.0 Avaya Aura Presence Services 6.1.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.2 Avaya Aura Presence Services 6.1 SP2 Avaya Aura Presence Services 6.1 SP1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Messaging 6.1.1 Avaya Aura Messaging 6.3 Avaya Aura Messaging 6.2 SP4 Avaya Aura Messaging 6.2 Avaya Aura Messaging 6.1 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 7.0 Avaya Aura Experience Portal 6.0 Avaya Aura Conferencing 8.0 Avaya Aura Conferencing 7.2 SP7 Avaya Aura Conferencing 7.2 SP6 Avaya Aura Conferencing 7.2 Avaya Aura Conferencing 7.0 Avaya Aura Communication Manager 6.3.8 Avaya Aura Communication Manager 6.3 SSP04 Avaya Aura Communication Manager 6.3 Avaya Aura Communication Manager 6.2 Avaya Aura Communication Manager 6.0.1 Avaya Aura Communication Manager 6.0 Avaya Aura Collaboration Environment 3.0 Avaya Aura Collaboration Environment 2.0 Avaya Aura Application Server 5300 SIP Core 3.0 SP10 Avaya Aura Application Server 5300 SIP Core 3.0 PB5 Avaya Aura Application Server 5300 SIP Core 3.0 PB3 Avaya Aura Application Server 5300 SIP Core 3.0 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.3 Avaya Aura Application Enablement Services 6.2 Avaya Aura Application Enablement Services 6.1.2 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 6.0 Asperasoft Aspera Shares 1.9 Asperasoft Aspera Shares 1.7.5 Asperasoft Aspera Shares 1.7.3 Asperasoft Aspera Shares 1.0.1 Asperasoft Aspera Shares 1.9.2 Asperasoft Aspera Proxy 1.2.3 Asperasoft Aspera Proxy 1.2.2 Asperasoft Aspera Orchestrator 2.2.1 Asperasoft Aspera OnDemand 3.5 Asperasoft Aspera Faspex 3.9 Asperasoft Aspera Faspex 3.7.7 Asperasoft Aspera Faspex 3.7.5 Asperasoft Aspera Faspex 3.0.3 Asperasoft Aspera Faspex 3.9.2 Asperasoft Aspera Enterprise Server 3.5.4 Asperasoft Aspera Enterprise Server 3.5.2 Asperasoft Aspera Enterprise Server 3.5.1 Asperasoft Aspera Drive 1.2.1 Asperasoft Aspera Console 2.5.3 Asperasoft Aspera Console 2.3.1 Asperasoft Aspera Console 2.3 Asperasoft Aspera Console 2.0.1 Asperasoft Aspera Console 3.0.0 Asperasoft Aspera Connect Server 3.5.4 Asperasoft Aspera Connect Server 3.5.2 Asperasoft Aspera Connect Server 3.5.1 AlienVault AlienVault 4.15.2 AlienVault AlienVault 4.15.1 AlienVault AlienVault 4.15 AlienVault AlienVault 4.14 AlienVault AlienVault 4.13 AlienVault AlienVault 4.12.1 AlienVault AlienVault 4.12 |
| Not Vulnerable: |
Rockwell Automation Stratix 5900 15.6.3 Oracle Enterprise Manager Ops Center 12.3 Oracle Enterprise Manager Ops Center 12.2.1 Oracle Enterprise Manager Ops Center 12.2 Oracle Enterprise Manager Ops Center 12.1.4 OpenSSL Project OpenSSL 1.0.1h OpenSSL Project OpenSSL 1.0.0m OpenSSL Project OpenSSL 0.9.8za Juniper CTPOS 7.0r4 IBM SDK for Node.js 1.1.0.13 IBM Rational Tau 4.3.0.6 Interim Fix IBM QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module 7.10.1.35.00 IBM PureApplication System 2.1.0.1 IBM PureApplication System 2.0.0.1 Interim Fix IBM Netezza Platform Software 7.2.0.4-P3 IBM Netezza Platform Software 7.1.0.5-P3 IBM Netezza Platform Software 7.0.4.8-P3 IBM Netezza Platform Software 7.0.2.16-P3 IBM Flex System FC5022 16Gb SAN Scalable Switch 7.3.1 IBM Flex System EN4023 10Gb Scalable Switch 6.0 HP Virtual Connect Enterprise Manager SDK 7.5.0 HP Version Control Repository Manager 7.5.0 HP Version Control Agent 7.3.5 HP Version Control Agent 7.5.0 HP Systems Insight Manager 7.5.0 HP System Management Homepage (SMH) 7.5 HP System Management Homepage 7.5 HP Insight Orchestration 7.5.0 AlienVault AlienVault 5.0 |
Discussion
OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
OpenSSL is prone to a remote memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application using the vulnerable library. Failed exploit attempts will result in denial-of-service conditions.
The following are vulnerable:
OpenSSL 1.0.1 prior to 1.0.1h.
OpenSSL 1.0.0 prior to 1.0.0m.
OpenSSL 0.9.8 prior to 0.9.8za.
OpenSSL is prone to a remote memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application using the vulnerable library. Failed exploit attempts will result in denial-of-service conditions.
The following are vulnerable:
OpenSSL 1.0.1 prior to 1.0.1h.
OpenSSL 1.0.0 prior to 1.0.0m.
OpenSSL 0.9.8 prior to 0.9.8za.
Exploit / POC
OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
OpenSSL '/evp/encode.c' Remote Memory Corruption Vulnerability
References:
References:
- evp: prevent underflow in base64 decoding (OpenSSL)
- evp: prevent underflow in base64 decoding (OpenSSL)
- evp: prevent underflow in base64 decoding (OpenSSL)
- OpenSSL Project (OpenSSL Project)
- Security Advisory - AlienVault v5.0 addresses 21 vulnerabilities (AlienVault)
- Security Bulletin: Vulnerabilities in OpenSSL (Aspera)
- ASA-2015-201 (Avaya)
- Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
- CTX216642 Multiple Security Vulnerabilities in Citrix NetScaler Platform IPMI Li (Citrix)
- HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabiliti (HP)
- HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multipl (HP)
- HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities (hp)
- HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service ( (HP)
- IBM Advisory ssg1S1005226 (IBM)
- IBM Advisory ssg1S1005241 (IBM)
- IBM Advisory ssg1S1005254 (IBM)
- IBM Advisory swg21958089 (IBM)
- IBM i is affected by several OpenSSL vulnerabilities. (IBM)
- IBM SECURITY ADVISORY AIX OpenSSL (IBM)
- Multiple vulnerabilities in OpenSSL affect IBM Security Access Manager for Mobil (IBM)
- OpenSSL Security Advisory [19 Mar 2015] (OpenSSL )
- openssl security update (RHSA-2015-0800) (Avaya)
- OpenSSL vulnerabilities (OpenSSL)
- Oracle Critical Patch Update Advisory - January 2016 (Oracle)
- Security Bulletin: Multiple OpenSSL Vulnerabilities for IBM Protector for Mail S (IBM)
- Security Bulletin: Multiple Security Issues in IBM Media Server Due to OpenSSL I (IBM)
- Security Bulletin: Multiple vulnerabilities in OpenSSL affect Sterling Connect:E (IBM)
- Security Bulletin: OpenSSL 19th March 2015 advisory (Juniper)
- Security Bulletin: Vulnerabilities in OpenSSL affect GPFS V3.5 for Windows (CVE- (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Campaign, IBM ContactOp (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Cloud Manager with Open (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Endpoint Manager for Re (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM FileNet System Monitor/ (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Flex System FC5022 16Gb (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Guardium (CV (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM MessageSight (CVE-2015- (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Netezza Platform Softwa (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM PredictiveInsight (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM SDK for Node.js (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Security Virtual Server (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM SmartCloud Entry (CVE-2 (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sterling Connect:Direct (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Power Hardware Management C (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM (Multiple CVEs) (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Proventia Network Active By (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Proventia Network Enterpris (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect QLogic 8Gb Intelligent Pass (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect Real-time Compression CVE-2 (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect the Cordova platform packag (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affect WebSphere Message Broker an (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affects IBM Image Construction and (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL affects IBM PureApplication System (IBM)
- Security Bulletin: Vulnerabilities in OpenSSL including ClientHello DoS affect I (IBM)
- Security Bulletin: Vulnerabilities in SSL affect IBM DataPower Gateways (CVE-201 (IBM)
- swg21970748: Security Bulletin: Vulnerabilities in OpenSSL affect Informix Gener (IBM)
- Vulnerabilities in OpenSSL affect IBM Security Access Manager for Web (IBM)
- Vulnerabilities in OpenSSL affect Rational Tau (CVE-2015-0208, CVE-2015-0286, CV (ibm)
- Vulnerabilities in OpenSSL affects Rational Application Developer for WebSphere (IBM)
- Vulnerabilities in OpenSSL affects Rational Software Architect for Websphere Sof (IBM)