Vulnerability CVE-2012-2110

Vulnerability CVE-2012-2110

Published: 2012-04-19

Description:

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.

See advisories in our WLB2 database:

	Topic	Author	Date
High	OpenSSL 1.0.1 Memory Corruption	Tavis Ormandy	20.04.2012
Med.	OpenSSL 1.0.1 ASN1 BIO Vulnerability	Tavis Ormandy	20.04.2012
High	OpenSSL ASN1 BIO Incomplete Fix	Red Hat	25.04.2012
High	RSA BSAFE SSL-C 2.8.6 BEAST Buffer Overflow Fixes	EMC	12.09.2012

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Redhat -> Openssl
Openssl -> Openssl

References:

http://archives.neohapsis.com/archives/fulldisclosure/2012-04/0209.html

http://cvs.openssl.org/chngview?cn=22431

http://cvs.openssl.org/chngview?cn=22434

http://cvs.openssl.org/chngview?cn=22439

http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079149.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079299.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080176.html

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00007.html

http://marc.info/?l=bugtraq&m=133728068926468&w=2

http://marc.info/?l=bugtraq&m=133951357207000&w=2

http://marc.info/?l=bugtraq&m=134039053214295&w=2

http://osvdb.org/81223

http://rhn.redhat.com/errata/RHSA-2012-0518.html

http://rhn.redhat.com/errata/RHSA-2012-0522.html

http://rhn.redhat.com/errata/RHSA-2012-1306.html

http://rhn.redhat.com/errata/RHSA-2012-1307.html

http://rhn.redhat.com/errata/RHSA-2012-1308.html

http://secunia.com/advisories/48847

http://support.apple.com/kb/HT5784

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564

http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578

http://www.debian.org/security/2012/dsa-2454

http://www.exploit-db.com/exploits/18756

http://www.mandriva.com/security/advisories?name=MDVSA-2012:060

http://www.openssl.org/news/secadv_20120419.txt

http://www.securityfocus.com/bid/53158

http://www.securitytracker.com/id?1026957

http://www.ubuntu.com/usn/USN-1424-1

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03839862

https://kb.juniper.net/KB27376

Vulnerability CVE-2012-2110

See advisories in our WLB2 database:

High

OpenSSL 1.0.1 Memory Corruption

Med.

OpenSSL 1.0.1 ASN1 BIO Vulnerability

High

OpenSSL ASN1 BIO Incomplete Fix

High

RSA BSAFE SSL-C 2.8.6 BEAST Buffer Overflow Fixes

CWE-119

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

7.5/10

6.4/10

10/10

Remote

Low

No required

Partial

Partial

Partial

Affected software

References: