CNVD-2016-08123

Vulnerability from cnvd - Published: 2016-09-27
VLAI
Title
OpenSSL OCSP状态请求扩展内存耗尽漏洞
Description
OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL 1.1.0a、1.0.2i、1.0.1u之前版本在处理恶意客户不断发送的大量OCSP状态请求扩展时，服务器会因内存耗尽而最终拒绝服务。默认配置的服务器即使不支持OCSP，也会导致拒绝服务。使用"no-ocsp"构建时间选项的build不受影响。默认配置的服务器，使用的OpenSSL 1.0.1g之前版本，不受影响，除非应用支持启用OCSP stapling。
Severity
中
Patch Name
OpenSSL OCSP状态请求扩展内存耗尽漏洞的补丁
Patch Description
OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL 1.1.0a、1.0.2i、1.0.1u之前版本在处理恶意客户不断发送的大量OCSP状态请求扩展时，服务器会因内存耗尽而最终拒绝服务。默认配置的服务器即使不支持OCSP，也会导致拒绝服务。使用"no-ocsp"构建时间选项的build不受影响。默认配置的服务器，使用的OpenSSL 1.0.1g之前版本，不受影响，除非应用支持启用OCSP stapling。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

用户可参考如下供应商提供的安全公告获得补丁信息： https://www.openssl.org/news/secadv/20160922.txt

Reference
https://www.openssl.org/news/secadv/20160922.txt http://www.securityfocus.com/bid/93150 http://www.securityweek.com/openssl-patch-low-severity-issue-creates-critical-flaw
Impacted products
Name
['OpenSSL OpenSSL <1.1.0a', 'OpenSSL OpenSSL <1.0.2i', 'OpenSSL OpenSSL <1.0.1u']
Show details on source website
To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "93150"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-6304"
    }
  },
  "description": "OpenSSL\u662f\u4e00\u79cd\u5f00\u653e\u6e90\u7801\u7684SSL\u5b9e\u73b0\uff0c\u7528\u6765\u5b9e\u73b0\u7f51\u7edc\u901a\u4fe1\u7684\u9ad8\u5f3a\u5ea6\u52a0\u5bc6\uff0c\u73b0\u5728\u88ab\u5e7f\u6cdb\u5730\u7528\u4e8e\u5404\u79cd\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f\u4e2d\u3002\r\n\r\nOpenSSL 1.1.0a\u30011.0.2i\u30011.0.1u\u4e4b\u524d\u7248\u672c\u5728\u5904\u7406\u6076\u610f\u5ba2\u6237\u4e0d\u65ad\u53d1\u9001\u7684\u5927\u91cfOCSP\u72b6\u6001\u8bf7\u6c42\u6269\u5c55\u65f6\uff0c\u670d\u52a1\u5668\u4f1a\u56e0\u5185\u5b58\u8017\u5c3d\u800c\u6700\u7ec8\u62d2\u7edd\u670d\u52a1\u3002\u9ed8\u8ba4\u914d\u7f6e\u7684\u670d\u52a1\u5668\u5373\u4f7f\u4e0d\u652f\u6301OCSP\uff0c\u4e5f\u4f1a\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u4f7f\u7528\"no-ocsp\"\u6784\u5efa\u65f6\u95f4\u9009\u9879\u7684build\u4e0d\u53d7\u5f71\u54cd\u3002\u9ed8\u8ba4\u914d\u7f6e\u7684\u670d\u52a1\u5668\uff0c\u4f7f\u7528\u7684OpenSSL 1.0.1g\u4e4b\u524d\u7248\u672c\uff0c\u4e0d\u53d7\u5f71\u54cd\uff0c\u9664\u975e\u5e94\u7528\u652f\u6301\u542f\u7528OCSP stapling\u3002",
  "discovererName": "Shi Lei",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://www.openssl.org/news/secadv/20160922.txt",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-08123",
  "openTime": "2016-09-27",
  "patchDescription": "OpenSSL\u662f\u4e00\u79cd\u5f00\u653e\u6e90\u7801\u7684SSL\u5b9e\u73b0\uff0c\u7528\u6765\u5b9e\u73b0\u7f51\u7edc\u901a\u4fe1\u7684\u9ad8\u5f3a\u5ea6\u52a0\u5bc6\uff0c\u73b0\u5728\u88ab\u5e7f\u6cdb\u5730\u7528\u4e8e\u5404\u79cd\u7f51\u7edc\u5e94\u7528\u7a0b\u5e8f\u4e2d\u3002\r\n\r\nOpenSSL 1.1.0a\u30011.0.2i\u30011.0.1u\u4e4b\u524d\u7248\u672c\u5728\u5904\u7406\u6076\u610f\u5ba2\u6237\u4e0d\u65ad\u53d1\u9001\u7684\u5927\u91cfOCSP\u72b6\u6001\u8bf7\u6c42\u6269\u5c55\u65f6\uff0c\u670d\u52a1\u5668\u4f1a\u56e0\u5185\u5b58\u8017\u5c3d\u800c\u6700\u7ec8\u62d2\u7edd\u670d\u52a1\u3002\u9ed8\u8ba4\u914d\u7f6e\u7684\u670d\u52a1\u5668\u5373\u4f7f\u4e0d\u652f\u6301OCSP\uff0c\u4e5f\u4f1a\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u4f7f\u7528\"no-ocsp\"\u6784\u5efa\u65f6\u95f4\u9009\u9879\u7684build\u4e0d\u53d7\u5f71\u54cd\u3002\u9ed8\u8ba4\u914d\u7f6e\u7684\u670d\u52a1\u5668\uff0c\u4f7f\u7528\u7684OpenSSL 1.0.1g\u4e4b\u524d\u7248\u672c\uff0c\u4e0d\u53d7\u5f71\u54cd\uff0c\u9664\u975e\u5e94\u7528\u652f\u6301\u542f\u7528OCSP stapling\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "OpenSSL OCSP\u72b6\u6001\u8bf7\u6c42\u6269\u5c55\u5185\u5b58\u8017\u5c3d\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "OpenSSL OpenSSL \u003c1.1.0a",
      "OpenSSL OpenSSL  \u003c1.0.2i",
      "OpenSSL OpenSSL  \u003c1.0.1u"
    ]
  },
  "referenceLink": "https://www.openssl.org/news/secadv/20160922.txt\r\nhttp://www.securityfocus.com/bid/93150\r\nhttp://www.securityweek.com/openssl-patch-low-severity-issue-creates-critical-flaw",
  "serverity": "\u4e2d",
  "submitTime": "2016-09-23",
  "title": "OpenSSL OCSP\u72b6\u6001\u8bf7\u6c42\u6269\u5c55\u5185\u5b58\u8017\u5c3d\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.