Gentoo: openssl buffer overflow vulnerability
Researchers have discovered a timing attack on RSA keys, to which OpenSSL is generally vulnerable, unless RSA blinding has been turned on.
Summary
- - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200303-15 - - ---------------------------------------------------------------------
- - ---------------------------------------------------------------------
- From advisory:
"Researchers have discovered a timing attack on RSA keys, to which OpenSSL is generally vulnerable, unless RSA blinding has been turned on.
Typically, it will not have been, because it is not easily possible to do so when using OpenSSL to provide SSL or TLS.
The enclosed patch switches blinding on by default. Applications that wish to can remove the blinding with RSA_blinding_off(), but this is not generally advised. It is also possible to disable it completely by defining OPENSSL_NO_FORCE_RSA_BLINDING at compile-time.
The performance impact of blinding appears to be small (a few percent)."
Read the full advisory at openssl
SOLUTION
It is recommended that all Gentoo Linux users who are running dev-libs/openssl upgrade to openssl-0.9.6i-r1 as follows:
emerge sync emerge openssl emerge clean
- - --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - - ---------------------------------------------------------------------
0.9.6i-r1
Resolution
References
Availability
Concerns
Severity
PACKAGE : openssl
SUMMARY : timing based attack
DATE : 2003-03-20 09:20 UTC
EXPLOIT : remote
VERSIONS AFFECTED : <0.9.6i-r1 : fixed version>=0.9.6i-r1
CVE : CAN-2003-0147
