Date: Wed, 6 Aug 2014 23:12:58 +0000 (UTC) From: Xin LI <delphij@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r364230 - head/security/vuxml Message-ID: <53e2b67a.59a3.154ca685@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: delphij Date: Wed Aug 6 23:12:58 2014 New Revision: 364230 URL: http://svnweb.freebsd.org/changeset/ports/364230 QAT: https://qat.redports.org/buildarchive/r364230/ Log: Document OpenSSL multiple vulnerabilities. Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Aug 6 23:02:16 2014 (r364229) +++ head/security/vuxml/vuln.xml Wed Aug 6 23:12:58 2014 (r364230) @@ -57,6 +57,82 @@ Notes: --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="8aff07eb-1dbd-11e4-b6ba-3c970e169bc2"> + <topic>OpenSSL -- multiple vulnerabilities</topic> + <affects> + <package> + <name>openssl</name> + <range><ge>1.0.1</ge><lt>1.0.1_14</lt></range> + </package> + <package> + <name>mingw32-openssl</name> + <range><ge>1.0.1</ge><lt>1.0.1i</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The OpenSSL Project reports:</p> + <blockquote cite="https://www.openssl.org/news/secadv_20140806.txt">; + <p>A flaw in OBJ_obj2txt may cause pretty printing functions + such as X509_name_oneline, X509_name_print_ex et al. to leak + some information from the stack. [CVE-2014-3508]</p> + <p>The issue affects OpenSSL clients and allows a malicious + server to crash the client with a null pointer dereference + (read) by specifying an SRP ciphersuite even though it was + not properly negotiated with the client. [CVE-2014-5139]</p> + <p>If a multithreaded client connects to a malicious server + using a resumed session and the server sends an ec point + format extension it could write up to 255 bytes to freed + memory. [CVE-2014-3509]</p> + <p>An attacker can force an error condition which causes + openssl to crash whilst processing DTLS packets due to + memory being freed twice. This can be exploited through + a Denial of Service attack. [CVE-2014-3505]</p> + <p>An attacker can force openssl to consume large amounts + of memory whilst processing DTLS handshake messages. + This can be exploited through a Denial of Service + attack. [CVE-2014-3506]</p> + <p>By sending carefully crafted DTLS packets an attacker + could cause openssl to leak memory. This can be exploited + through a Denial of Service attack. [CVE-2014-3507]</p> + <p>OpenSSL DTLS clients enabling anonymous (EC)DH + ciphersuites are subject to a denial of service attack. + A malicious server can crash the client with a null pointer + dereference (read) by specifying an anonymous (EC)DH + ciphersuite and sending carefully crafted handshake + messages. [CVE-2014-3510]</p> + <p>A flaw in the OpenSSL SSL/TLS server code causes the + server to negotiate TLS 1.0 instead of higher protocol + versions when the ClientHello message is badly + fragmented. This allows a man-in-the-middle attacker + to force a downgrade to TLS 1.0 even if both the server + and the client support a higher protocol version, by + modifying the client's TLS records. [CVE-2014-3511]</p> + <p>A malicious client or server can send invalid SRP + parameters and overrun an internal buffer. Only + applications which are explicitly set up for SRP + use are affected. [CVE-2014-3512]</p> + </blockquote> + </body> + </description> + <references> + <url>https://www.openssl.org/news/secadv_20140806.txt</url>; + <cvename>CVE-2014-3505</cvename> + <cvename>CVE-2014-3506</cvename> + <cvename>CVE-2014-3507</cvename> + <cvename>CVE-2014-3508</cvename> + <cvename>CVE-2014-3509</cvename> + <cvename>CVE-2014-3510</cvename> + <cvename>CVE-2014-3511</cvename> + <cvename>CVE-2014-3512</cvename> + <cvename>CVE-2014-5139</cvename> + </references> + <dates> + <discovery>2014-08-06</discovery> + <entry>2014-08-06</entry> + </dates> + </vuln> + <vuln vid="be5421ab-1b56-11e4-a767-5453ed2e2b49"> <topic>krfb -- Possible Denial of Service or code execution via integer overflow</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53e2b67a.59a3.154ca685>