Oval Definition:oval:org.mitre.oval:def:29435
Revision Date:2016-02-19Version:15
Title:AIX OpenSSL CMS Code vulnerability
Description:The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2015-1792
Platform(s):IBM AIX 6.1
IBM AIX 7.1
Product(s):
Definition Synopsis
  • platforms
  • IBM AIX 6.1 is installed
  • OR IBM AIX 7.1 is installed
  • AND filesets
  • File Version Exists
  • openssl.base greater than or equal 1.0.1.500
  • AND openssl.base less than or equal 1.0.1.514
  • AND NOT Interim fix IV74809s9a is installed
  • OR File Version Exists
  • openssl.base greater than or equal 0.9.8.401
  • AND openssl.base less than or equal 0.9.8.2505
  • AND NOT Interim fix IV74809s9b is installed
  • OR File Version Exists
  • openssl.base greater than or equal 12.9.8.1100
  • AND openssl.base less than or equal 12.9.8.2505
  • AND NOT Interim fix IV74809s9c is installed
    • BACK