Multiple vulnerabilities have been identified in OpenSSL, which could be exploited by attackers to cause a denial of service or bypass security restrictions.

The first issue is caused by an error in the "ASN1_STRING_print_ex()" function when printing a specially crafted BMPString or UniversalString, which could be exploited to cause an invalid memory access, creating a denial of service condition.

The second vulnerability is caused by an error in the "CMS_verify()" function when handling malformed signed attributes, which could allow attackers to cause an invalid set of signed attributes to appear valid and preventing content digests from being checked.

The third issue is caused by an error when processing a malformed ASN1 structure on certain platforms, which could be exploited to cause an invalid memory access, creating a denial of service condition.

Affected Products

OpenSSL version 0.9.8j and prior

Solution

Upgrade to OpenSSL version 0.9.8k :
http://www.openssl.org/source/

References

http://www.vupen.com/english/advisories/2009/0850
http://www.openssl.org/news/secadv_20090325.txt

Credits

Vulnerabilities reported by the vendor, Ivan Nestlerode (IBM) and Paolo Ganci.

Changelog

2009-03-26 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.