此 OpenSSL 更新可修正下列安全性問題：

CVE-2016-2105：EVP_EncodeUpdate 溢位　(bsc#977614)

CVE-2016-2106：EVP_EncryptUpdate 溢位 (bsc#977615)

CVE-2016-2108：ASN.1 編碼器中的記憶體損毀　(bsc#977617)

CVE-2016-2109：ASN.1 BIO 過度記憶體配置 (bsc#976942)

CVE-2016-0702：對模組化乘冪「CacheBleed」發動側通道攻擊 (bsc#968050)

此外，下列非安全性問題也已修正：

修正 ASN1_parse 中的緩衝區滿溢問題。(bsc#976943)

允許弱式 DH 群組。(bsc#973223)

請注意，Tenable Network Security 已直接從 SUSE 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 AIX 主機上安裝的 OpenSSL 版本受到下列弱點影響：

- 檔案 crypto/evp/encode.c 內的 EVP_EncodeUpdate() 函式存在一個堆積緩衝區溢位情形，處理大量輸入資料時會觸發此情形。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2105)

- crypto/evp/evp_enc.c 檔案的 EVP_EncryptUpdate() 函式中存在一個堆積緩衝區溢位情形，含有部分區塊的相同函式想起之前的呼叫後，處理大量輸入資料時會觸發此情形。未經驗證的遠端攻擊者可加以惡意利用，進而引發拒絕服務情形。(CVE-2016-2106)

- ASN.1 編碼器存在一個遠端程式碼執行弱點，此弱點是因為嘗試編碼以負整數表示的零值時，發生反向溢位情形所導致。未經驗證的遠端攻擊者可惡意利用此弱點損毀記憶體，進而導致任意程式碼執行。(CVE-2016-2108)

- d2i BIO 函式從 BIO 讀取 ASN.1 資料時存在多個不明瑕疵，這是因為無效編碼造成配置大量記憶體所導致。
 未經驗證的遠端攻擊者可惡意利用這些瑕疵，透過資源耗盡造成拒絕服務情形。(CVE-2016-2109)

- crypto/x509/x509_obj.c 檔案的 X509_NAME_oneline() 函式處理極長的 ASN1 字串時，存在一個超出邊界讀取錯誤。未經驗證的遠端攻擊者可惡意利用此錯誤洩漏堆疊記憶體的內容。
 (CVE-2016-2176)

在 OpenSSL 1.0.1t 之前版本與 1.0.2h 之前的 1.0.2 版中，ASN.1 BIO 實作中的 crypto/asn1/a_d2i_fp.c 所用的 asn1_d2i_read_bio 函式允許遠端攻擊者透過簡短的無效編碼，造成拒絕服務 (記憶體耗用)。(CVE-2016-2109)

According to its banner, the version of OpenSSL on the remote host is 1.0.1 prior to 1.0.1t, or 1.0.2 prior to 1.0.2h. It is therefore affected by the following vulnerabilities :

 - A flaw exists in 'crypto/asn1/a_d2i_fp.c', which is triggered during the handling of large length fields in ASN.1 BIO. This may allow a remote attacker to exhaust memory resources, potentially crashing a process linked against the library.
 - A flaw exists in the 'aesni_cbc_hmac_sha1_cipher()' function in 'crypto/evp/e_aes_cbc_hmac_sha1.c' and 'aesni_cbc_hmac_sha256_cipher()' function in 'crypto/evp/e_aes_cbc_hmac_sha256.c'. The issue is triggered when a connection uses an AES CBC cipher and AES-NI is supported by the server. This may allow a MitM (Man-in-the-Middle) attacker to conduct a padding oracle attack to potentially decrypt traffic.
 - A flaw in the 'X509_NAME_oneline()' function in 'crypto/x509/x509_obj.c' that is triggered when handling overly long ASN1 strings. This may allow a remote attacker to potentially disclose arbitrary stack memory contents.
 - An overflow condition in the 'EVP_EncryptUpdate()' function in 'crypto/evp/evp_enc.c' is triggered when handling a large amount of input data after a previous call to the same function with a partial block. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially resulting in the execution of arbitrary code.
 - An overflow condition in the 'EVP_EncodeUpdate()' function in 'crypto/evp/encode.c' is triggered when handling a large amount of input data. This may allow a context-dependent attacker to cause a heap-based buffer overflow, crashing a process linked against the library or potentially resulting in the execution of arbitrary code.

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
91282	SUSE SLES10 安全性更新：openssl (SUSE-SU-2016:1360-1)	Nessus	SuSE Local Security Checks	2016/5/20	2021/1/6	critical
92323	AIX OpenSSL 公告：openssl_advisory20.asc	Nessus	AIX Local Security Checks	2016/7/15	2023/4/21	critical
94984	F5 網路 BIG-IP：OpenSSL 弱點 (K23230229)	Nessus	F5 Networks Local Security Checks	2016/11/21	2019/1/4	high
9390	OpenSSL 1.0.1 < 1.0.1t / 1.0.2 < 1.0.2h Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2016/7/8	2019/3/6	high
503087	Siemens SCALANCE X-200RNA Switch Devices Resource Management Errors (CVE-2016-2109)	Tenable OT Security	Tenable.ot	2025/3/13	2025/3/13	high

偵測

搜尋 Plugin

critical

critical

high

high

high