Bug 1177569 (CVE-2014-9424)
Summary: | CVE-2014-9424 libressl: Double-free in ssl_parse_clienthello_use_srtp_ext() function | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Huzaifa S. Sidhpurwala <huzaifas> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED NOTABUG | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | unspecified | CC: | jrusnack, tmraz |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2014-12-29 05:42:08 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Huzaifa S. Sidhpurwala
2014-12-29 05:25:27 UTC
This flaw arises because an attempt is made to free the "clnt" structure, which has been already freed previously, resulting in a possible double-free issue. (Looks like just Dos, unless clnt could be user-controlled). OpenSSL code does not contain the vulnerable code. No "clnt" variable exists in the ssl_parse_clienthello_use_srtp_ext() function. Statement: Not vulnerable. This issue does not affect the version of OpenSSL package as shipped with Red Hat Enterprise Linux 5, 6 and 7. This issue does not affect the version of OpenSSL package, as shipped in Fedora 19, 20 and 21. |