CVE-2015-0209: Double Free
A use-after-free flaw was found in the way OpenSSL imported malformed Elliptic Curve private keys. A specially crafted key file could cause an application using OpenSSL to crash when imported.
Other sources
From openssl git:
commit 1b4a8df38fc9ab3c089ca5765075ee53ec5bd66a Author: Matt Caswell <matt> Date: Mon Feb 9 11:38:41 2015 +0000
Fix a failure to NULL a pointer freed on error.
Inspired by BoringSSL commit 517073cd4b by Eric Roman <eroman>
CVE-2015-0209
Reviewed-by: Emilia Käsper <emilia>
in elliptic curves code. might cause a double free, but its hard to say.
— Red Hat
Use-after-free vulnerability in the d2iECPrivateKey function in crypto/ec/ecasn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2015-0209?
CVE-2015-0209 has a moderate severity as it can lead to application crashes when importing maliciously crafted Elliptic Curve private keys.
How do I fix CVE-2015-0209?
To fix CVE-2015-0209, update OpenSSL to a version that is not affected by this vulnerability, such as 0.9.8, 1.0.1l, or 1.0.2.
What applications are affected by CVE-2015-0209?
Applications utilizing OpenSSL versions before 1.0.1e-30.el6_6.7 or 1.0.1e-42.el7_1.4 are vulnerable to CVE-2015-0209.
Can CVE-2015-0209 be exploited remotely?
CVE-2015-0209 typically requires an attacker to provide a specially crafted key file, making it primarily an application-level risk rather than a direct remote exploit.
What are the chances of an exploit for CVE-2015-0209?
Exploitation of CVE-2015-0209 can lead to crashes, but the practical impact would depend on whether malicious key files are used in an application context.