Buffer overflow in openssl (Alpine package)

1) Buffer overflow

EUVDB-ID: #VU32816

Risk: Medium

CVSSv4.0: 5.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2012-2110

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.

Mitigation

Install update from vendor's website.

Vulnerable software versions

openssl (Alpine package): 0.9.8m-r0 - 1.0.0b-r0

CPE2.3

• cpe:2.3:o:alpine:openssl_alpine_package:0.9.8m-r0:*:*:*:*:alpine_linux:*:1.9
• cpe:2.3:o:alpine:openssl_alpine_package:0.9.8l-r0:*:*:*:*:alpine_linux:*:1.9
• cpe:2.3:o:alpine:openssl_alpine_package:0.9.8x-r0:*:*:*:*:alpine_linux:*:1.10

External links

https://git.alpinelinux.org/aports/commit/?id=ae6187604e6df263bb0b449e8c7ab8c343a87c60
https://git.alpinelinux.org/aports/commit/?id=6efa33e8289cde944d8f52b72249dc9c0310c6a6
https://git.alpinelinux.org/aports/commit/?id=fb8150c3f037c1eea5bc0dd93a3457d045d79f99

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.