Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 …
Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object identifiers in X.509 certificates.
References
- http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded x_refsource_MISC
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html x_refsource_MISC
- http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-L… x_refsource_MISC
- http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt x_refsource_CONFIRM
- http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-L… x_transferred x_refsource_MISC
- http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt x_transferred x_refsource_CONFIRM
- http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded x_transferred x_refsource_MISC
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html x_transferred x_refsource_MISC
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html x_refsource_MISC
- http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-L… x_refsource_MISC
- http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt x_refsource_CONFIRM
- http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded x_refsource_MISC
- http://packetstormsecurity.com/files/133998/Qualys-Security-Advisory-LibreSSL-L… x_transferred x_refsource_MISC
- http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.3.1-relnotes.txt x_transferred x_refsource_CONFIRM
- http://www.securityfocus.com/archive/1/archive/1/536692/100/0/threaded x_transferred x_refsource_MISC
- http://lists.opensuse.org/opensuse-updates/2015-10/msg00050.html x_transferred x_refsource_MISC
Affected products
LibreSSL
- ==before 2.3.1
Matching in nixpkgs
pkgs.netcat
Utility which reads and writes data across network connections — LibreSSL implementation
pkgs.libressl
Free TLS/SSL implementation
pkgs.libressl_4_0
Free TLS/SSL implementation
pkgs.libressl_4_1
Free TLS/SSL implementation
Package maintainers
-
@fpletz Franz Pletz <fpletz@fnordicwalking.de>
-
@thoughtpolice Austin Seipp <aseipp@pobox.com>