CVE-2015-0286: Medium severity openssl vulnerability
The ASN1TYPEcmp function in crypto/asn1/atype.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.
Other sources
The function ASN1TYPEcmp will crash with an invalid read if an attempt is made to compare ASN.1 boolean types. Since ASN1TYPEcmp is used to check certificate signature algorithm consistency this can be used to crash any certificate verification operation and exploited in a denial of service attack. Any application which performs certificate verification is vulnerable, including OpenSSL clients and servers which enable client authentication.
This issue affects OpenSSL versions: 1.0.2, 1.0.1, 1.0.0, and 0.9.8. This issue is fixed in versions: 1.0.2a, 1.0.1m, 1.0.0r, and 0.9.8zf.
Acknowledgements:
Red Hat would like to thank the OpenSSL project for reporting this issue. Upstream acknowledges Stephen Henson of the OpenSSL development team as the original reporter.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0286?
CVE-2015-0286 has a severity rating that indicates it can lead to a denial of service due to improper boolean-type comparisons in OpenSSL.
How do I fix CVE-2015-0286?
To fix CVE-2015-0286, update your OpenSSL to version 0.9.8ze or later, 1.0.0r or later, 1.0.1m or later, or 1.0.2a or later.
What versions of OpenSSL are affected by CVE-2015-0286?
CVE-2015-0286 affects OpenSSL versions prior to 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and all versions before 1.0.2a.
Can CVE-2015-0286 be exploited remotely?
Yes, CVE-2015-0286 can be exploited by remote attackers to cause a denial of service on affected OpenSSL implementations.
What are the potential impacts of CVE-2015-0286?
The potential impacts of CVE-2015-0286 include application crashes and invalid read operations, leading to service disruptions.