** WHITE information - Unlimited distribution allowed ** ** see https://wiki.egi.eu/wiki/EGI_CSIRT:TLP for distribution restrictions ** EGI CSIRT ADVISORY [EGI-ADV-20140408] Title: EGI SVG Advisory 'Critical' RISK - CVE-2014-0160 affecting OpenSSL [EGI-ADV-20140408] **UPDATE** Date: 2014-04-08 Updated: 2014-04-09 URL: https://wiki.egi.eu/wiki/EGI_CSIRT:Alerts/OpenSSL-2014-04-08 Introduction ============ A vulnerability has been found in OpenSSL which allows unauthenticated remote attackers to access memory areas in vulnerable systems. It has been assigned CVE-2014-0160 [R 1]. **UPDATE/CORRECTION** In particular, note that Red Hat Enterprise Linux/CentOS 6.4 and earlier are not affected, *BUT* that all Scientific Linux 6.x versions are vulnerable. Details ======= This vulnerability affects systems using OpenSSL. OpenSSL has issued a brief advisory on this issue [R 2] A missing bounds check in the handling of the TLS heartbeat extension can be used to reveal up to 64kB of memory to a connected client or server. This allows sensitive information like passwords, X509 private keys, session cookies and contents of encrypted messages to be revealed to an unauthenticated user. Sites need to patch vulnerable systems, with priority given to servers exposing SSL services, not forgetting to restart the services afterwards. Sites will then need new certificates for the previously vulnerable hosts. The vulnerability also affects client software that uses OpenSSL, which means that clients that connect to a malicious server could suffer from information leak. Risk category ============= This issue has been assessed as 'Critical' by the EGI SVG Risk Assessment Team and the CSIRT Team. Affected software ================= OpenSSL Versions 1.0.1 [a through f]. This issue is fixed in OpenSSL 1.0.1g and in vendor-patched versions of OpenSSL 1.0.1e. Versions of OpenSSL earlier than 1.0.1 are not affected. Linux distributions with vulnerable OpenSSL versions include RHEL 6.5 and derivatives, and Ubuntu 12.04.4 LTS. ** IMPORTANT** Please note that Scientific Linux has the to-be-updated-openssl-1.0.1 in ALL releases, not only the 6.5. CentOS and RedHat only have openssl-1.0.1 in the 6.5 release. So unlike CentOS and RedHat Enterprise Linux, Scientific Linux is vulnerable for all 6.X releases. For many releases the patch is applied to various versions. A list of versions which are suitable for use/non vulnerable is given here: - RedHat/CentOS/Scientific Linux: openssl-1.0.1e-16.el6_5.7 - Debian Wheezy: 1.0.1e-2+deb7u6 - OpenSUSE 12.3: openssl-1.0.1e-1.44.1 OpenSUSE 13.1: openssl-1.0.1e-11.32.1 - Fedora 19: openssl-1.0.1e-37.fc19.1 Fedora 20: openssl-1.0.1e-37.fc20.1 - Ubuntu 13.10: 1.0.1e-3ubuntu1.2 Ubuntu 12.10: 1.0.1c-3ubuntu2.7 Ubuntu 12.04 LTS: 1.0.1-4ubuntu5.12 An external extensive list of non-vulnerable versions is given in [R 4] Mitigation ========== N/A Component installation information ================================== All sites running a vulnerable OpenSSL version must upgrade to a patched version. Updates have been released by all major vendors. Priority should be given to servers exposing SSL services, not forgetting to restart the services afterwards. Then sites will need new re-keyed certificates for the previously vulnerable hosts; i.e. new certificates not based on the potentially exposed key-pair. Once the site has installed the new certificates, the old ones must be revoked. Recommendations =============== All running resources MUST be either patched or temporarily removed from service as soon as possible, and at the latest by 2014-04-15T21:00+01:00. Sites failing to act and/or failing to respond to requests from the EGI CSIRT team risk site suspension. Sites will then need new re-keyed certificates for the previously vulnerable hosts; i.e. new certificates not based on the potentially exposed key-pair. EGI CSIRT recommends that this is done in a staggered fashion according to how important/sensitive the services are, to ease the load on CA:s. Please note that this should only be done for hosts that have been running a vulnerable version of OpenSSL. Sites should then revoke the old certificates. Then, finally, sites need to evaluate what other information that has been potentially exposed by this; e.g. passwords that were submitted to vulnerable servers. Credit ====== EGI SVG and CSIRT was alerted to this vulnerability by Raul Lopes and David Kelsey. References ========== [R 1] http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0160 [R 2] http://www.openssl.org/news/secadv_20140407.txt [R 3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0160 [R 4] http://www.circl.lu/pub/tr-21/ Timeline ======== Yyyy-mm-dd 2014-04-08 EGI and SVG alerted to this Publicly disclosed vulnerability 2014-04-08 Acknowledgement from the EGI SVG 2014-04-08 EGI SVG and CSIRT consider 'Critical' 2014-04-08 Alert issued with 7 day deadline 2014-04-09 Revised adding additional information and clarification.