REDHAT-BUG-2376219: Medium severity OpenSSL OpenSSL vulnerability
If there is an error in initializing ChaCha20 cipher with OpenSSL, an invalid error code is returned. This can happen if there is an heap exhaustion. This error is not correctly detected and could allow libssh to use partially initialized cipher context. This is caused by the mismatch of return value meaning from OpenSSL and libssh, where OpenSSL error (rv=0) aliases with SSHOK (0) and is returned directly from the function chacha20poly1305setkey(). This will likely cause error somewhere down the road.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2376219?
The severity of REDHAT-BUG-2376219 is considered high due to potential exploitation by allowing the use of partially initialized cipher contexts.
How do I fix REDHAT-BUG-2376219?
Fixing REDHAT-BUG-2376219 involves upgrading to the latest versions of OpenSSL and libssh that address the initialization error.
What systems are affected by REDHAT-BUG-2376219?
REDHAT-BUG-2376219 affects systems using specific versions of OpenSSL and libssh that may be vulnerable to heap exhaustion issues.
What is the cause of REDHAT-BUG-2376219?
The cause of REDHAT-BUG-2376219 is a mismatch in return values during the initialization of the ChaCha20 cipher in OpenSSL leading to incorrect error detection.
Can REDHAT-BUG-2376219 be exploited remotely?
Yes, REDHAT-BUG-2376219 can be potentially exploited remotely if an attacker can trigger the cipher context usage through a network service.