Bug 1180185 (CVE-2014-3572) - CVE-2014-3572 openssl: ECDH downgrade bug fix
Summary: CVE-2014-3572 openssl: ECDH downgrade bug fix
Alias: CVE-2014-3572
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
Depends On: 1180189 1181015 1181016 1181017 1181018
Blocks: 1180194
TreeView+ depends on / blocked
Reported: 2015-01-08 15:18 UTC by Vasyl Kaigorodov
Modified: 2021-10-20 10:48 UTC (History)
21 users (show)

Fixed In Version: OpenSSL 1.0.1k, OpenSSL 1.0.0p, OpenSSL 0.9.8zd
Doc Type: Bug Fix
Doc Text:
It was discovered that OpenSSL would perform an ECDH key exchange with a non-ephemeral key even when the ephemeral ECDH cipher suite was selected. A malicious server could make a TLS/SSL client using OpenSSL use a weaker key exchange method than the one requested by the user.
Clone Of:
Last Closed: 2021-10-20 10:48:31 UTC

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2015:0066 0 normal SHIPPED_LIVE Moderate: openssl security update 2015-01-22 02:28:18 UTC

Description Vasyl Kaigorodov 2015-01-08 15:18:01 UTC
New release of OpenSSL [1] fixes the following bug:

Fix bug where an OpenSSL client would accept a handshake using an ephemeral ECDH ciphersuites with the server key exchange message omitted.

Upstream patches:
- master: https://github.com/openssl/openssl/commit/b15f8769644b00ef7283521593360b7b2135cb63
- 0.9.8: https://github.com/openssl/openssl/commit/e42a2abadc90664e2615dc63ba7f79cf163f780a
- 1.0.1: https://github.com/openssl/openssl/commit/ef28c6d6767a6a30df5add36171894c96628fe98

[1]: https://www.openssl.org/news/changelog.html

Comment 1 Vincent Danen 2015-01-08 18:25:28 UTC
Upstream commit that looks to fix the problem:


External References:


Comment 3 Tomas Mraz 2015-01-13 17:09:46 UTC
I am not sure whether this affects also the ephemeral DH ciphersuites or not. The patch adds the requirement for ServerKeyExchange message for ephemeral DH as well.

Comment 4 Huzaifa S. Sidhpurwala 2015-01-16 04:12:11 UTC

This issue does not affect the version of openssl and openssl097a as shipped with Red Hat Enterprise Linux 5. This issue does not affect the version of openssl098e as shipped with Red Hat Enterprise Linux 6 and 7.

Comment 5 errata-xmlrpc 2015-01-21 21:28:53 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6
  Red Hat Enterprise Linux 7

Via RHSA-2015:0066 https://rhn.redhat.com/errata/RHSA-2015-0066.html

Note You need to log in before you can comment on or make changes to this bug.