Wind River Support Network

HomeDefectsLIN6-10019
Fixed

LIN6-10019 : Security Advisory - openssl - CVE-2015-1788

Created: Jun 15, 2015    Updated: Dec 3, 2018
Resolved Date: Jun 24, 2015
Found In Version: 6.0.0.21
Fix Version: 6.0.0.22
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1788

Other Downloads


Live chat
Online