CVE-2016-8610

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

Remote denial of service in SSL alert handling. (CVE-2016-8610)

In gnutls_x509_ext_import_proxy: if the language was set but the policy wasn't, that could lead to a double free. (CVE-2017-5334)

Decoding a specially crafted OpenPGP certificate could have lead to heap and stack overflows. (CVE-2017-5335, CVE-2017-5336 and CVE-2017-5337)

These are all security issues fixed in the gnutls-3.7.2-1.2 package on the GA media of openSUSE Tumbleweed.

This update for gnutls fixes the following issues:

• Malformed asn1 definitions could cause a segmentation fault in the asn1 definition parser (bsc#961491).
• CVE-2016-8610: Remote denial of service in SSL alert handling (bsc#1005879).
• CVE-2017-5335: Decoding a specially crafted OpenPGP certificate could have lead to heap and stack overflows (bsc#1018832).
• CVE-2017-5336: Decoding a specially crafted OpenPGP certificate could have lead to heap and stack overflows (bsc#1018832).
• CVE-2017-5337: Decoding a specially crafted OpenPGP certificate could have lead to heap and stack overflows (bsc#1018832).

This update for gnutls fixes the following security issues:

• GnuTLS could have crashed when processing maliciously crafted OpenPGP certificates (GNUTLS-SA-2017-2, bsc#1018832, CVE-2017-5335, CVE-2017-5337, CVE-2017-5336)
• GnuTLS could have falsely accepted certificates when using OCSP (GNUTLS-SA-2016-3, bsc#999646, CVE-2016-7444)
• GnuTLS could have suffered from 100% CPU load DoS attacks by using SSL alert packets during the handshake (bsc#1005879, CVE-2016-8610)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085, CVE-2017-3731)
• Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• fix ca-bundle path (bsc#1022271)

This update for openssl1 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085)
• Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• call c_rehash in %post (bsc#1001707)
• ship static libraries in the devel package (bsc#1022644)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• don't attempt session resumption if no ticket is present and session ID length is zero (bsc#984663)

This update for compat-openssl097g fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• resume reading from /dev/urandom when interrupted by a signal (bsc#995075)
• fix crash in print_notice (bsc#998190)

This update for compat-openssl098 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• don't attempt session resumption if no ticket is present and session ID length is zero (bsc#984663)

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

• Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
• Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

• CVE-2015-3238

libtasn1:

• CVE-2015-3622
• CVE-2016-4008

expat:

expat:

• CVE-2012-6702
• CVE-2015-1283
• CVE-2016-0718
• CVE-2016-5300
• CVE-2016-9063
• CVE-2017-9233

libidn:

• CVE-2015-2059
• CVE-2015-8948
• CVE-2016-6261
• CVE-2016-6262
• CVE-2016-6263

zlib:

• CVE-2016-9840
• CVE-2016-9841
• CVE-2016-9842
• CVE-2016-9843

curl:

• CVE-2016-5419
• CVE-2016-5420
• CVE-2016-5421
• CVE-2016-7141
• CVE-2016-7167
• CVE-2016-8615
• CVE-2016-8616
• CVE-2016-8617
• CVE-2016-8618
• CVE-2016-8619
• CVE-2016-8620
• CVE-2016-8621
• CVE-2016-8622
• CVE-2016-8623
• CVE-2016-8624
• CVE-2016-9586
• CVE-2017-1000100
• CVE-2017-1000101
• CVE-2017-7407

openssl:

• CVE-2016-2105
• CVE-2016-2106
• CVE-2016-2107
• CVE-2016-2108
• CVE-2016-2109
• CVE-2016-2177
• CVE-2016-2178
• CVE-2016-2179
• CVE-2016-2180
• CVE-2016-2181
• CVE-2016-2182
• CVE-2016-2183
• CVE-2016-6302
• CVE-2016-6303
• CVE-2016-6304
• CVE-2016-6306
• CVE-2016-7056
• CVE-2016-8610
• CVE-2017-3731

cracklib:

• CVE-2016-6318

pcre:

• CVE-2014-8964
• CVE-2015-2325
• CVE-2015-2327
• CVE-2015-2328
• CVE-2015-3210
• CVE-2015-3217
• CVE-2015-5073
• CVE-2015-8380
• CVE-2015-8381
• CVE-2015-8382
• CVE-2015-8383
• CVE-2015-8384
• CVE-2015-8385
• CVE-2015-8386
• CVE-2015-8387
• CVE-2015-8388
• CVE-2015-8389
• CVE-2015-8390
• CVE-2015-8391
• CVE-2015-8392
• CVE-2015-8393
• CVE-2015-8394
• CVE-2015-8395
• CVE-2016-1283
• CVE-2016-3191

appamor:

• CVE-2017-6507

bash:

• CVE-2014-6277
• CVE-2014-6278
• CVE-2016-0634
• CVE-2016-7543

cpio:

• CVE-2016-2037

glibc:

• CVE-2016-1234
• CVE-2016-3075
• CVE-2016-3706
• CVE-2016-4429
• CVE-2017-1000366

perl:

• CVE-2015-8853
• CVE-2016-1238
• CVE-2016-2381
• CVE-2016-6185

libssh2_org:

• CVE-2016-0787

util-linux:

• CVE-2016-5011
• CVE-2017-2616

ncurses:

• CVE-2017-10684
• CVE-2017-10685
• CVE-2017-11112
• CVE-2017-11113

libksba:

• CVE-2016-4574
• CVE-2016-4579

libxml2:

• CVE-2014-0191
• CVE-2015-8806
• CVE-2016-1762
• CVE-2016-1833
• CVE-2016-1834
• CVE-2016-1835
• CVE-2016-1837
• CVE-2016-1838
• CVE-2016-1839
• CVE-2016-1840
• CVE-2016-2073
• CVE-2016-3627
• CVE-2016-3705
• CVE-2016-4447
• CVE-2016-4448
• CVE-2016-4449
• CVE-2016-4483
• CVE-2016-4658
• CVE-2016-9318
• CVE-2016-9597
• CVE-2017-9047
• CVE-2017-9048
• CVE-2017-9049
• CVE-2017-9050

libgcrypt:

• CVE-2015-7511
• CVE-2016-6313
• CVE-2017-7526

update-alternatives:

• CVE-2015-0860

systemd:

• CVE-2014-9770
• CVE-2015-8842
• CVE-2016-7796

dbus-1:

• CVE-2014-7824
• CVE-2015-0245

Finally, the following packages received non-security fixes:

• augeas
• bzip2
• ca-certificates-mozilla
• coreutils
• cryptsetup
• cyrus-sasl
• dirmngr
• e2fsprogs
• findutils
• gpg2
• insserv-compat
• kmod
• libcap
• libsolv
• libzypp
• lua51
• lvm2
• netcfg
• p11-kit
• permissions
• procps
• rpm
• sed
• sg3_utils
• shadow
• zypper

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2016-7056: ECSDA P-256 timing attack key recovery (bsc#1019334)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085)
• CVE-2016-8610: remote denial of service in SSL alert handling (bsc#1005878)
• CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read (bsc#1056058)

Bug fixes:

• support alternate root ca chains (bsc#1032261)
• X509_get_default_cert_file() returns an incorrect path (bsc#1022271)
• Segmentation fault in 'openssl speed' when engine library file cannot be found (bsc#1000677)
• adjust DEFAULT_SUSE to meet 1.0.2 and current state (bsc#1027908)
• Missing important ciphers in openssl 1.0.1i-47.1 on SLES12 SP1 (bsc#990592)
• out of bounds read+crash in DES_fcrypt (bsc#1065363)
• tracker bug for January 26th 2017 release (bsc#1021641)
• patch for CVE-2016-2108 fails negative zero exploit (bsc#1001502)
• Birthday attacks on 64-bit block ciphers aka triple-des (SWEET32) (bsc#1001912)
• Include additional patch for CVE-2016-2108 (bsc#1004499)
• openssl DEFAULT_SUSE cipher list is missing ECDHE-ECDSA ciphers (bsc#1055825)

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl1 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for compat-openssl097g fixes the following issues:

Security issue fixed:

• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).

Non-security issue fixed:

• Fixed timing vulnerability in DSA signature generation (bsc#1113742).

This update for compat-openssl098 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl fixes the following issues:

• CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)
• CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)
• CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)
• CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)
• CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)
• Fix One&Done side-channel attack on RSA (bsc#1104789)
• Reject invalid EC point coordinates (bsc#1131291)
• The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)
• Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)
• blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes:

• correct the error detection in the fips patch (bsc#1106197)
• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other releases were fixed in a previous security update. (CVE-2016-2177)

It was discovered that OpenSSL did not properly handle Montgomery multiplication, resulting in incorrect results leading to transient failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2016-7055)

It was discovered that OpenSSL did not properly use constant-time operations when performing ECDSA P-256 signing. A remote attacker could possibly use this issue to perform a timing attack and recover private ECDSA keys. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-7056)

Shi Lei discovered that OpenSSL incorrectly handled certain warning alerts. A remote attacker could possibly use this issue to cause OpenSSL to stop responding, resulting in a denial of service. (CVE-2016-8610)

Robert Święcki discovered that OpenSSL incorrectly handled certain truncated packets. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2017-3731)

It was discovered that OpenSSL incorrectly performed the x86_64 Montgomery squaring procedure. While unlikely, a remote attacker could possibly use this issue to recover private keys. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2017-3732)

Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote attacker could possibly use this issue to bypass certain certificate validation measures. This issue only applied to Ubuntu 16.04 LTS. (CVE-2016-7444)

Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts. A remote attacker could possibly use this issue to cause GnuTLS to hang, resulting in a denial of service. This issue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)

It was discovered that GnuTLS incorrectly decoded X.509 certificates with a Proxy Certificate Information extension. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2017-5334)

It was discovered that GnuTLS incorrectly handled certain OpenPGP certificates. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)

USN-3183-1 fixed CVE-2016-8610 in GnuTLS in Ubuntu 16.04 LTS and Ubuntu 16.10. This update provides the corresponding update for Ubuntu 12.04 LTS and Ubuntu 14.04 LTS.

Original advisory details:

Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote attacker could possibly use this issue to bypass certain certificate validation measures. This issue only applied to Ubuntu 16.04 LTS. (CVE-2016-7444)

Shi Lei discovered that GnuTLS incorrectly handled certain warning alerts. A remote attacker could possibly use this issue to cause GnuTLS to hang, resulting in a denial of service. This issue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2016-8610)

It was discovered that GnuTLS incorrectly decoded X.509 certificates with a Proxy Certificate Information extension. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. (CVE-2017-5334)

It was discovered that GnuTLS incorrectly handled certain OpenPGP certificates. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-5335, CVE-2017-5336, CVE-2017-5337)