製品・ソフトウェアに関する情報

JVN脆弱性詳細

OpenSSL の t1_lib.c 内の ssl_parse_serverhello_tlsext 関数におけるサービス運用妨害 (DoS) の脆弱性

Title	OpenSSL の t1_lib.c 内の ssl_parse_serverhello_tlsext 関数におけるサービス運用妨害 (DoS) の脆弱性
Summary	OpenSSL の t1_lib.c 内の ssl_parse_serverhello_tlsext 関数には、マルチスレッドおよびセッション再開 (session resumption）が使用されている場合、競合状態により、サービス運用妨害 (メモリの上書きおよびクライアントのアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。
Possible impacts	リモートの SSL サーバにより、lliptic Curve (EC) Supported Point Formats Extension データを送信されることで、サービス運用妨害 (メモリの上書きおよびクライアントのアプリケーションクラッシュ) 状態にされるなど、不特定の影響を受ける可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 6, 2014, midnight
Registration Date	Aug. 15, 2014, 4:55 p.m.
Last Update	Oct. 7, 2016, 11:49 a.m.

CVSS2.0 : 警告
Score	6.8
Vector	AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected System

OpenSSL Project

OpenSSL 1.0.0 以上 1.0.0n 未満

OpenSSL 1.0.1 以上 1.0.1i 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2014-3509	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509
National Vulnerability Database (NVD)
2	CVE-2014-3509	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3509

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-362	https://jvndb.jvn.jp/ja/cwe/CWE-362.html

ベンダー情報

No	Name	URL
HP Security Bulletin
1	HPSBHF03293	http://marc.info/?l=bugtraq&m=142660345230545&w=2
2	HPSBMU03216	http://marc.info/?l=bugtraq&m=142350350616251&w=2
3	HPSBMU03260	http://marc.info/?l=bugtraq&m=142495837901899&w=2
4	HPSBMU03261	http://marc.info/?l=bugtraq&m=143290522027658&w=2
5	HPSBMU03263	http://marc.info/?l=bugtraq&m=143290437727362&w=2
6	HPSBMU03267	http://marc.info/?l=bugtraq&m=142624590206005&w=2
7	HPSBMU03304	http://marc.info/?l=bugtraq&m=142791032306609&w=2
HPE Security Bulletin
8	HPSBMU03611	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05150888
9	HPSBMU03612	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05158380
IBM Support Document
10	1682293	http://www-01.ibm.com/support/docview.wss?uid=swg21682293
11	1686997	http://www-01.ibm.com/support/docview.wss?uid=swg21686997
OpenSSL
12	Fix race condition in ssl_parse_serverhello_tlsext	https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=fb0bc2b273bcc2d5401dd883fe869af4fc74bb21
OpenSSL Security Advisory
13	Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509)	http://www.openssl.org/news/secadv_20140806.txt
Red Hat Security Advisory
14	RHSA-2015:0197	http://rhn.redhat.com/errata/RHSA-2015-0197.html
Security Advisory
15	Huawei-SA-20141008-OpenSSL	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm
Tenable Network Security
16	[R1] OpenSSL Protocol Downgrade Vulnerability Affects Tenable Products	http://www.tenable.com/security/tns-2014-06

Change Log

No	Changed Details	Date of change
0	[2014年08月15日] 掲載 [2014年09月29日] ベンダ情報： Tenable Network Security ([R1] OpenSSL Protocol Downgrade Vulnerability Affects Tenable Products) を追加 [2014年11月28日] ベンダ情報：IBM (1682293) を追加ベンダ情報：IBM (1686997) を追加ベンダ情報：Huawei (Huawei-SA-20141008-OpenSSL) を追加 [2015年06月15日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：ヒューレット・パッカード (HPSBHF03293) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03216) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03260) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03267) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03304) を追加ベンダ情報：レッドハット (RHSA-2015:0197) を追加 [2016年10月07日] ベンダ情報：ヒューレット・パッカード (HPSBMU03261) を追加ベンダ情報：ヒューレット・パッカード (HPSBMU03263) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03611) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03612) を追加	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2014-3509

Summary	Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.
Publication Date	Aug. 14, 2014, 8:55 a.m.
Registration Date	Jan. 26, 2021, 3:10 p.m.
Last Update	Nov. 21, 2024, 11:08 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*

Related information, measures and tools

No	URL	タグ
1	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc
2	ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-008.txt.asc
3	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc
4	http://aix.software.ibm.com/aix/efixes/security/openssl_advisory10.asc
5	http://linux.oracle.com/errata/ELSA-2014-1052.html
6	http://linux.oracle.com/errata/ELSA-2014-1052.html
7	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html
8	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html
9	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html
10	http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html
11	http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html
12	http://lists.opensuse.org/opensuse-updates/2014-08/msg00036.html
13	http://marc.info/?l=bugtraq&m=142350350616251&w=2
14	http://marc.info/?l=bugtraq&m=142350350616251&w=2
15	http://marc.info/?l=bugtraq&m=142350350616251&w=2
16	http://marc.info/?l=bugtraq&m=142350350616251&w=2
17	http://marc.info/?l=bugtraq&m=142495837901899&w=2
18	http://marc.info/?l=bugtraq&m=142495837901899&w=2
19	http://marc.info/?l=bugtraq&m=142495837901899&w=2
20	http://marc.info/?l=bugtraq&m=142495837901899&w=2
21	http://marc.info/?l=bugtraq&m=142624590206005&w=2
22	http://marc.info/?l=bugtraq&m=142624590206005&w=2
23	http://marc.info/?l=bugtraq&m=142660345230545&w=2
24	http://marc.info/?l=bugtraq&m=142660345230545&w=2
25	http://marc.info/?l=bugtraq&m=142660345230545&w=2
26	http://marc.info/?l=bugtraq&m=142660345230545&w=2
27	http://marc.info/?l=bugtraq&m=142791032306609&w=2
28	http://marc.info/?l=bugtraq&m=142791032306609&w=2
29	http://marc.info/?l=bugtraq&m=143290437727362&w=2
30	http://marc.info/?l=bugtraq&m=143290437727362&w=2
31	http://marc.info/?l=bugtraq&m=143290522027658&w=2
32	http://marc.info/?l=bugtraq&m=143290522027658&w=2
33	http://rhn.redhat.com/errata/RHSA-2015-0197.html
34	http://rhn.redhat.com/errata/RHSA-2015-0197.html
35	http://secunia.com/advisories/58962
36	http://secunia.com/advisories/58962
37	http://secunia.com/advisories/59700
38	http://secunia.com/advisories/59700
39	http://secunia.com/advisories/59710
40	http://secunia.com/advisories/59710
41	http://secunia.com/advisories/59756
42	http://secunia.com/advisories/59756
43	http://secunia.com/advisories/60022
44	http://secunia.com/advisories/60022
45	http://secunia.com/advisories/60221
46	http://secunia.com/advisories/60221
47	http://secunia.com/advisories/60493
48	http://secunia.com/advisories/60493
49	http://secunia.com/advisories/60684
50	http://secunia.com/advisories/60684
51	http://secunia.com/advisories/60803
52	http://secunia.com/advisories/60803
53	http://secunia.com/advisories/60917
54	http://secunia.com/advisories/60917
55	http://secunia.com/advisories/60921
56	http://secunia.com/advisories/60921
57	http://secunia.com/advisories/60938
58	http://secunia.com/advisories/60938
59	http://secunia.com/advisories/61017
60	http://secunia.com/advisories/61017
61	http://secunia.com/advisories/61100
62	http://secunia.com/advisories/61100
63	http://secunia.com/advisories/61139
64	http://secunia.com/advisories/61139
65	http://secunia.com/advisories/61184
66	http://secunia.com/advisories/61184
67	http://secunia.com/advisories/61775
68	http://secunia.com/advisories/61775
69	http://secunia.com/advisories/61959
70	http://secunia.com/advisories/61959
71	http://security.gentoo.org/glsa/glsa-201412-39.xml
72	http://security.gentoo.org/glsa/glsa-201412-39.xml
73	http://www.debian.org/security/2014/dsa-2998
74	http://www.debian.org/security/2014/dsa-2998
75	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm
76	http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-372998.htm
77	http://www.mandriva.com/security/advisories?name=MDVSA-2014:158
78	http://www.mandriva.com/security/advisories?name=MDVSA-2014:158
79	http://www.securityfocus.com/bid/69084
80	http://www.securityfocus.com/bid/69084
81	http://www.securitytracker.com/id/1030693
82	http://www.securitytracker.com/id/1030693
83	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240
84	http://www-01.ibm.com/support/docview.wss?uid=nas8N1020240
85	http://www-01.ibm.com/support/docview.wss?uid=swg21682293
86	http://www-01.ibm.com/support/docview.wss?uid=swg21682293
87	http://www-01.ibm.com/support/docview.wss?uid=swg21683389
88	http://www-01.ibm.com/support/docview.wss?uid=swg21683389
89	http://www-01.ibm.com/support/docview.wss?uid=swg21686997
90	http://www-01.ibm.com/support/docview.wss?uid=swg21686997
91	https://bugzilla.redhat.com/show_bug.cgi?id=1127498
92	https://bugzilla.redhat.com/show_bug.cgi?id=1127498
93	https://exchange.xforce.ibmcloud.com/vulnerabilities/95159
94	https://exchange.xforce.ibmcloud.com/vulnerabilities/95159
95	https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=fb0bc2b273bcc2d5401dd883fe869af4fc74bb21
96	https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=fb0bc2b273bcc2d5401dd883fe869af4fc74bb21
97	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
98	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888
99	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
100	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
101	https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html
102	https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-September/000196.html
103	https://support.citrix.com/article/CTX216642
104	https://support.citrix.com/article/CTX216642
105	https://techzone.ergon.ch/CVE-2014-3511
106	https://techzone.ergon.ch/CVE-2014-3511
107	https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc
108	https://www.freebsd.org/security/advisories/FreeBSD-SA-14:18.openssl.asc
109	https://www.openssl.org/news/secadv_20140806.txt	Vendor Advisory
110	https://www.openssl.org/news/secadv_20140806.txt	Vendor Advisory

Common Vulnerabilities List

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0c:::::::*
cpe:2.3:a:openssl:openssl:1.0.0i:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta2::::::
cpe:2.3:a:openssl:openssl:1.0.0m:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.0h:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta3::::::
cpe:2.3:a:openssl:openssl:1.0.0f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:beta1::::::
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.0k:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta4::::::
cpe:2.3:a:openssl:openssl:1.0.0:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.0:beta5::::::
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.0l:::::::*
cpe:2.3:a:openssl:openssl:1.0.0a:::::::*
cpe:2.3:a:openssl:openssl:1.0.0b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1:::::::*
cpe:2.3:a:openssl:openssl:1.0.0g:::::::*