CVE-2018-0739

NameCVE-2018-0739
DescriptionConstructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-1330-1, DSA-4157-1, DSA-4158-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libtomcrypt (PTS)bullseye1.18.2-5fixed
bookworm1.18.2-6fixed
sid, trixie1.18.2+dfsg-7fixed
openssl (PTS)bullseye1.1.1w-0+deb11u1fixed
bullseye (security)1.1.1n-0+deb11u5fixed
bookworm3.0.14-1~deb12u1fixed
bookworm (security)3.0.14-1~deb12u2fixed
sid, trixie3.3.2-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libtomcryptsource(unstable)1.18.2-1low
opensslsourcewheezy1.0.1t-1+deb7u4DLA-1330-1
opensslsourcejessie1.0.1t-1+deb8u8DSA-4157-1
opensslsourcestretch1.1.0f-3+deb9u2DSA-4157-1
opensslsource(unstable)1.1.0h-1
openssl1.0sourcestretch1.0.2l-2+deb9u3DSA-4158-1
openssl1.0source(unstable)1.0.2o-1

Notes

[stretch] - libtomcrypt <no-dsa> (Minor issue)
[jessie] - libtomcrypt <no-dsa> (Minor issue)
https://www.openssl.org/news/secadv/20180327.txt
OpenSSL_1_1_0-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=2ac4c6f7b2b2af20c0e2b0ba05367e454cd11b33
OpenSSL_1_0_2-stable: https://git.openssl.org/?p=openssl.git;a=commit;h=9310d45087ae546e27e61ddf8f6367f29848220d
https://github.com/libtom/libtomcrypt/pull/373

Search for package or bug name: Reporting problems