Description
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
OpenSSL OpenSSL
openssl-1.1.0affectedopenssl-1.1.0aaffectedopenssl-1.1.0baffectedopenssl-1.1.0caffectedopenssl-1.1.0daffected
References
- http://www.securityfocus.com/bid/96269 ↗
- https://www.openssl.org/news/secadv/20170216.txt ↗
- http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html ↗
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03728en_us ↗
- http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html ↗
- https://github.com/openssl/openssl/commit/4ad93618d26a3ea23d36ad5498ff4f59eff3a4d2 ↗
- http://www.securitytracker.com/id/1037846 ↗
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html ↗