# MA-412.082014: MyCERT Advisory - OpenSSL Patches Nine Vulnerabilities

**Date:** 14 Aug 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-412.082014  
**Advisory ID:** MA-412.082014

---

**1.0 Introduction**
OpenSSL has released updates patching nine vulnerabilities, some of which may allow an attacker to cause a Denial of Service (DoS) attacks against the Datagram Transport Layer Security (DTLS) protocol or force the client to revert to a less secure Transport Layer Security (TLS) 1.0 protocol.
**2.0 Vulnerability and Recommendation**
Listed below are the vulnerabilities and its rectification:
> a) Information leak in pretty printing functions (CVE-2014-3508)
>
> A flaw in OBJ\_obj2txt may cause pretty printing functions such as X509\_name\_oneline, X509\_name\_print\_ex et al. to leak some information from the stack. Applications may be affected if they echo pretty printing output to the attacker. OpenSSL SSL/TLS clients and servers themselves are not affected.
>
> Solution:
>
> - OpenSSL 0.9.8 users should upgrade to 0.9.8zb
> - OpenSSL 1.0.0 users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 users should upgrade to 1.0.1i.
>
> b) Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139)
>
> The issue affects OpenSSL clients and allows a malicious server to crash the client with a null pointer dereference (read) by specifying an SRP ciphersuite even though it was not properly negotiated with the client. This can be exploited through a Denial of Service attack.
>
> Solution:
>
> - OpenSSL 1.0.1 SSL/TLS client users should upgrade to 1.0.1i.
>
> c) Race condition in ssl\_parse\_serverhello\_tlsext (CVE-2014-3509)
>
> If a multithreaded client connects to a malicious server using a resumed session and the server sends an ec point format extension it could write up to 255 bytes to freed memory.
>
> Solution:
>
> - OpenSSL 1.0.0 SSL/TLS client users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 SSL/TLS client users should upgrade to 1.0.1i.
>
> d) Double Free when processing DTLS packets (CVE-2014-3505)
>
> An attacker can force an error condition which causes openssl to crash whilst processing DTLS packets due to memory being freed twice. This can be exploited through a Denial of Service attack.
>
> Solution:
>
> - OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
> - OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.
>
> e) DTLS memory exhaustion (CVE-2014-3506)
>
> An attacker can force openssl to consume large amounts of memory whilst processing DTLS handshake messages. This can be exploited through a Denial of Service attack.
>
> Solution:
>
> - OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
> - OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.
>
> f) DTLS memory leak from zero-length fragments (CVE-2014-3507)
>
> By sending carefully crafted DTLS packets an attacker could cause openssl to leak memory. This can be exploited through a Denial of Service attack.
>
> Solution:
>
> - OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
> - OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.
>
> g) OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510)
>
> OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to a denial of service attack. A malicious server can crash the client with a null pointer dereference (read) by specifying an anonymous (EC)DH ciphersuite and sending carefully crafted handshake messages.
>
> Solution:
>
> - OpenSSL 0.9.8 DTLS client users should upgrade to 0.9.8zb
> - OpenSSL 1.0.0 DTLS client users should upgrade to 1.0.0n.
> - OpenSSL 1.0.1 DTLS client users should upgrade to 1.0.1i.
>
> h) OpenSSL TLS protocol downgrade attack (CVE-2014-3511)
>
> A flaw in the OpenSSL SSL/TLS server code causes the server to negotiate TLS 1.0 instead of higher protocol versions when the ClientHello message is badly fragmented. This allows a man-in-the-middle attacker to force a downgrade to TLS 1.0 even if both the server and the client support a higher protocol version, by modifying the client's TLS records.
>
> Solution:
>
> - OpenSSL 1.0.1 SSL/TLS server users should upgrade to 1.0.1i.
>
> i) SRP buffer overrun (CVE-2014-3512)
>
> A malicious client or server can send invalid SRP parameters and overrun an internal buffer. Only applications which are explicitly set up for SRP use are affected.
>
> Solution:
>
> - OpenSSL 1.0.1 SSL/TLS users should upgrade to 1.0.1i.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
**3.0 References**
[1] <https://www.us-cert.gov/ncas/current-activity/2014/08/07/Open-SSL-Patches-Nine-Vulnerabilities>
[2] [OpenSSL Security Advisory](https://www.openssl.org/news/secadv_20140806.txt)
[3] [OpenSSL patches nine security flaws](http://www.itnews.com.au/News/390790,openssl-patches-nine-security-flaws.aspx)