漏洞描述
The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
marc.infohttp://marc.info/?l=bugtraq&m=142660345230545&w=2↗secunia.comhttp://secunia.com/advisories/59669↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678167↗secunia.comhttp://secunia.com/advisories/59528↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0006.html↗secunia.comhttp://secunia.com/advisories/59429↗secunia.comhttp://secunia.com/advisories/59365↗secunia.comhttp://secunia.com/advisories/58743↗secunia.comhttp://secunia.com/advisories/58939↗marc.infohttp://marc.info/?l=bugtraq&m=140431828824371&w=2↗secunia.comhttp://secunia.com/advisories/59518↗secunia.comhttp://secunia.com/advisories/59189↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001841↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html↗secunia.comhttp://secunia.com/advisories/59364↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676879↗marc.infohttp://marc.info/?l=bugtraq&m=140499827729550&w=2↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg24037783↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676356↗www.securitytracker.comhttp://www.securitytracker.com/id/1030337↗secunia.comhttp://secunia.com/advisories/58660↗secunia.comhttp://secunia.com/advisories/59655↗secunia.comhttp://secunia.com/advisories/59162↗support.f5.comhttp://support.f5.com/kb/en-us/solutions/public/15000/300/sol15356.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677695↗secunia.comhttp://secunia.com/advisories/59451↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095755↗secunia.comhttp://secunia.com/advisories/59192↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2015:062↗secunia.comhttp://secunia.com/advisories/59342↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676035↗secunia.comhttp://secunia.com/advisories/60571↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676071↗secunia.comhttp://secunia.com/advisories/59514↗secunia.comhttp://secunia.com/advisories/59310↗lists.opensuse.orghttp://lists.opensuse.org/opensuse-security-announce/2015-04/msg00016.html↗secunia.comhttp://secunia.com/advisories/59450↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21673137↗www.blackberry.comhttp://www.blackberry.com/btsc/KB36051↗secunia.comhttp://secunia.com/advisories/59666↗marc.infohttp://marc.info/?l=bugtraq&m=140904544427729&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140448122410568&w=2↗secunia.comhttp://secunia.com/advisories/59454↗h20566.www2.hpe.comhttps://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946↗secunia.comhttp://secunia.com/advisories/59449↗secunia.comhttp://secunia.com/advisories/59587↗support.apple.comhttp://support.apple.com/kb/HT6443↗secunia.comhttp://secunia.com/advisories/59300↗secunia.comhttp://secunia.com/advisories/58337↗secunia.comhttp://secunia.com/advisories/59491↗aix.software.ibm.comhttp://aix.software.ibm.com/aix/efixes/security/openssl_advisory9.asc↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136470.html↗secunia.comhttp://secunia.com/advisories/58714↗secunia.comhttp://secunia.com/advisories/59659↗www.ibm.comhttp://www.ibm.com/support/docview.wss?uid=swg21676793↗h30499.www3.hp.comhttp://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002↗secunia.comhttp://secunia.com/advisories/58977↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095756↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2014:106↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=nas8N1020163↗secunia.comhttp://secunia.com/advisories/59040↗tools.cisco.comhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl↗secunia.comhttp://secunia.com/advisories/58713↗marc.infohttp://marc.info/?l=bugtraq&m=140266410314613&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140621259019789&w=2↗marc.infohttp://marc.info/?l=bugtraq&m=140389355508263&w=2↗secunia.comhttp://secunia.com/advisories/59784↗marc.infohttp://marc.info/?l=bugtraq&m=140482916501310&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21678289↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095757↗secunia.comhttp://secunia.com/advisories/59301↗secunia.comhttp://secunia.com/advisories/59126↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html↗marc.infohttp://marc.info/?l=bugtraq&m=140491231331543&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677527↗www.huawei.comhttp://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-345106.htm↗support.citrix.comhttp://support.citrix.com/article/CTX140876↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676062↗kc.mcafee.comhttps://kc.mcafee.com/corporate/index?page=content&id=SB10075↗lists.fedoraproject.orghttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html↗security.gentoo.orghttp://security.gentoo.org/glsa/glsa-201407-05.xml↗secunia.comhttp://secunia.com/advisories/59223↗secunia.comhttp://secunia.com/advisories/59188↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21683332↗bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=1103598↗www.openssl.orghttp://www.openssl.org/news/secadv_20140605.txt↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21675821↗marc.infohttp://marc.info/?l=bugtraq&m=140389274407904&w=2↗secunia.comhttp://secunia.com/advisories/59287↗www-947.ibm.comhttp://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095754↗www.novell.comhttps://www.novell.com/support/kb/doc.php?id=7015271↗secunia.comhttp://secunia.com/advisories/58945↗secunia.comhttp://secunia.com/advisories/59530↗www.fortiguard.comhttp://www.fortiguard.com/advisory/FG-IR-14-018/↗secunia.comhttp://secunia.com/advisories/58615↗secunia.comhttp://secunia.com/advisories/59490↗seclists.orghttp://seclists.org/fulldisclosure/2014/Dec/23↗marc.infohttp://marc.info/?l=bugtraq&m=140752315422991&w=2↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=isg400001843↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21677828↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676419↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676889↗git.openssl.orghttps://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=1632ef744872edc2aa2a53d487d3e79c965a4ad3↗secunia.comhttp://secunia.com/advisories/59441↗secunia.comhttp://secunia.com/advisories/59721↗marc.infohttp://marc.info/?l=bugtraq&m=140317760000786&w=2↗secunia.comhttp://secunia.com/advisories/59895↗secunia.comhttp://secunia.com/advisories/58883↗secunia.comhttp://secunia.com/advisories/59306↗www.securityfocus.comhttp://www.securityfocus.com/bid/67900↗kb.bluecoat.comhttps://kb.bluecoat.com/index?page=content&id=SA80↗secunia.comhttp://secunia.com/advisories/59990↗secunia.comhttp://secunia.com/advisories/61254↗kb.juniper.nethttp://kb.juniper.net/InfoCenter/index?page=content&id=JSA10629↗h30499.www3.hp.comhttp://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/534161/100/0/threaded↗secunia.comhttp://secunia.com/advisories/59413↗secunia.comhttp://secunia.com/advisories/59437↗www.vmware.comhttp://www.vmware.com/security/advisories/VMSA-2014-0012.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html↗www.oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html↗www-01.ibm.comhttp://www-01.ibm.com/support/docview.wss?uid=swg21676644↗secunia.comhttp://secunia.com/advisories/59175↗www.f-secure.comhttp://www.f-secure.com/en/web/labs_global/fsc-2014-6↗secunia.comhttp://secunia.com/advisories/59305↗