Upstream information

CVE-2012-0027 at MITRE

Description

The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.

SUSE information

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.96
Vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entry: 739719 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 12
  • libopenssl1_0_0 >= 1.0.1i-2.12
  • libopenssl1_0_0-32bit >= 1.0.1i-2.12
  • openssl >= 1.0.1i-2.12
Patchnames:
SUSE Linux Enterprise Desktop 12 GA libopenssl1_0_0
SUSE Linux Enterprise Desktop 12 SP1
  • libopenssl1_0_0 >= 1.0.1i-34.1
  • libopenssl1_0_0-32bit >= 1.0.1i-34.1
  • openssl >= 1.0.1i-34.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP1 GA libopenssl1_0_0
SUSE Linux Enterprise Desktop 12 SP2
  • libopenssl-devel >= 1.0.2j-55.1
  • libopenssl1_0_0 >= 1.0.2j-55.1
  • libopenssl1_0_0-32bit >= 1.0.2j-55.1
  • openssl >= 1.0.2j-55.1
Patchnames:
SUSE Linux Enterprise Desktop 12 SP2 GA libopenssl-devel
SUSE Linux Enterprise Server 12 SP2
  • libopenssl-devel >= 1.0.2j-55.1
  • libopenssl1_0_0 >= 1.0.2j-55.1
  • libopenssl1_0_0-32bit >= 1.0.2j-55.1
  • libopenssl1_0_0-hmac >= 1.0.2j-55.1
  • libopenssl1_0_0-hmac-32bit >= 1.0.2j-55.1
  • openssl >= 1.0.2j-55.1
  • openssl-doc >= 1.0.2j-55.1
Patchnames:
SUSE Linux Enterprise Server 12 SP2 GA libopenssl-devel
openSUSE 11.3
  • libopenssl1_0_0-debuginfo >= 1.0.0-6.13.1
  • libopenssl1_0_0-debuginfo-32bit >= 1.0.0-6.13.1
  • openssl-debuginfo >= 1.0.0-6.13.1
  • openssl-debugsource >= 1.0.0-6.13.1
openSUSE 11.3
  • libopenssl-devel >= 1.0.0-6.13.1
  • libopenssl1_0_0 >= 1.0.0-6.13.1
  • libopenssl1_0_0-32bit >= 1.0.0-6.13.1
  • openssl >= 1.0.0-6.13.1
  • openssl-doc >= 1.0.0-6.13.1
openSUSE 11.4
  • libopenssl-devel >= 1.0.0c-18.23.1
  • libopenssl1_0_0 >= 1.0.0c-18.23.1
  • libopenssl1_0_0-32bit >= 1.0.0c-18.23.1
  • openssl >= 1.0.0c-18.23.1
  • openssl-doc >= 1.0.0c-18.23.1
openSUSE 11.4
  • libopenssl-devel >= 1.0.0c-18.23.1
  • libopenssl0_9_8 >= 0.9.8m-6.7.1
  • libopenssl0_9_8-32bit >= 0.9.8m-6.7.1
  • libopenssl0_9_8-debuginfo >= 0.9.8m-6.7.1
  • libopenssl0_9_8-debuginfo-32bit >= 0.9.8m-6.7.1
  • libopenssl0_9_8-debugsource >= 0.9.8m-6.7.1
  • libopenssl1_0_0 >= 1.0.0c-18.23.1
  • libopenssl1_0_0-32bit >= 1.0.0c-18.23.1
  • libopenssl1_0_0-debuginfo >= 1.0.0c-18.23.1
  • libopenssl1_0_0-debuginfo-32bit >= 1.0.0c-18.23.1
  • openssl >= 1.0.0c-18.23.1
  • openssl-debuginfo >= 1.0.0c-18.23.1
  • openssl-debugsource >= 1.0.0c-18.23.1
  • openssl-doc >= 1.0.0c-18.23.1
Patchnames:
libopenssl-devel
openSUSE 13.2
  • libopenssl-devel >= 1.0.1i-2.1.4
  • libopenssl1_0_0 >= 1.0.1i-2.1.4
  • libopenssl1_0_0-32bit >= 1.0.1i-2.1.4
  • openssl >= 1.0.1i-2.1.4
Patchnames:
openSUSE 13.2 GA libopenssl-devel
openSUSE Leap 42.1
  • libopenssl-devel >= 1.0.1i-4.1
  • libopenssl1_0_0 >= 1.0.1i-4.1
  • libopenssl1_0_0-32bit >= 1.0.1i-4.1
  • openssl >= 1.0.1i-4.1
Patchnames:
openSUSE Leap 42.1 GA libopenssl-devel
openSUSE Leap 42.2
  • libopenssl-devel >= 1.0.2j-2.2
  • libopenssl1_0_0 >= 1.0.2j-2.2
  • libopenssl1_0_0-32bit >= 1.0.2j-2.2
  • openssl >= 1.0.2j-2.2
Patchnames:
openSUSE Leap 42.2 GA libopenssl-devel