OSVDB ID: 80040

Title: OpenSSL crypto/asn1/asn_mime.c mime_param_cmp() Function MIME Header Parsing Remote DoS

Info

Disclosure
Mar 12, 2012

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Mar 12, 2012

Description

 OpenSSL contains a flaw that may allow a remote denial of service. A Null pointer deference in the rypto/asn1/asn_mime.c mime_param_cmp() function when parsing MIME headers will result in a loss of availability for the program.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

 Upgrade to version 1.0.0h or 0.9.8u or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

The OpenSSL Project

OpenSSL

 1.0.0g
0.9.8t

IBM Corporation

Security Network Intrusion Prevention System

 1.7
1.8
2.4
2.5
3.2
3.3
4.1
4.2
4.3
4.4
4.5

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/80040