CVE-2018-0739

NameCVE-2018-0739
DescriptionConstructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-1330-1, DSA-4157-1, DSA-4158-1
NVD severitymedium (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libtomcrypt (PTS)jessie1.17-6vulnerable
stretch1.17-9vulnerable
buster, sid1.18.2-1fixed
openssl (PTS)jessie (security), jessie1.0.1t-1+deb8u8fixed
stretch (security), stretch1.1.0f-3+deb9u2fixed
buster, sid1.1.0h-4fixed
openssl1.0 (PTS)stretch (security), stretch1.0.2l-2+deb9u3fixed
buster, sid1.0.2o-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libtomcryptsource(unstable)1.18.2-1low
opensslsource(unstable)1.1.0h-1medium
opensslsourcejessie1.0.1t-1+deb8u8mediumDSA-4157-1
opensslsourcestretch1.1.0f-3+deb9u2mediumDSA-4157-1
opensslsourcewheezy1.0.1t-1+deb7u4mediumDLA-1330-1
openssl1.0source(unstable)1.0.2o-1medium
openssl1.0sourcestretch1.0.2l-2+deb9u3mediumDSA-4158-1

Notes

[stretch] - libtomcrypt <no-dsa> (Minor issue)
[jessie] - libtomcrypt <no-dsa> (Minor issue)
https://www.openssl.org/news/secadv/20180327.txt
OpenSSL_1_1_0-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33
OpenSSL_1_0_2-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=9310d45087ae546e27e61ddf8f6367f29848220d
https://github.com/libtom/libtomcrypt/pull/373

Search for package or bug name: Reporting problems