Oval Definition:oval:org.mitre.oval:def:29364
Revision Date:2016-02-19Version:15
Title:AIX OpenSSL DTLS peer vulnerability (segmentation fault or memory corruption)
Description:The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2014-8176
Platform(s):IBM AIX 6.1
IBM AIX 7.1
Product(s):
Definition Synopsis
  • platforms
  • IBM AIX 6.1 is installed
  • OR IBM AIX 7.1 is installed
  • AND filesets
  • File Version Exists
  • openssl.base greater than or equal 1.0.1.500
  • AND openssl.base less than or equal 1.0.1.514
  • AND NOT Interim fix IV74809s9a is installed
  • OR File Version Exists
  • openssl.base greater than or equal 0.9.8.401
  • AND openssl.base less than or equal 0.9.8.2505
  • AND NOT Interim fix IV74809s9b is installed
  • OR File Version Exists
  • openssl.base greater than or equal 12.9.8.1100
  • AND openssl.base less than or equal 12.9.8.2505
  • AND NOT Interim fix IV74809s9c is installed
    • BACK