Upstream information

CVE-2017-3732 at MITRE

Description

There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.

SUSE information

CVSS v2 Scores
  National Vulnerability Database SUSE
Base Score 4.30 2.57
Vector AV:N/AC:M/Au:N/C:P/I:N/A:N AV:N/AC:H/Au:N/C:P/I:N/A:N
Access Vector Network Network
Access Complexity Medium High
Authentication None None
Confidentiality Impact Partial Partial
Integrity Impact None None
Availability Impact None None
CVSS v3 Scores
  National Vulnerability Database
Base Score 5.9
Vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Access Vector Network
Access Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Impact High
Integrity Impact None
Availability Impact None

Note from the SUSE Security Team

This problem affects only openssl 1.0.2 and newer, older versions did not have the code and are not affected.

SUSE Bugzilla entries: 1021641 [RESOLVED / FIXED], 1022086 [RESOLVED / FIXED], 1025354 [RESOLVED / WORKSFORME]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Enterprise Storage 4
  • nodejs4 >= 4.7.3-14.1
Patchnames:
SUSE-Storage-4-2017-476
SUSE Linux Enterprise Desktop 12 SP2
  • libopenssl-devel >= 1.0.2j-59.1
  • libopenssl1_0_0 >= 1.0.2j-59.1
  • libopenssl1_0_0-32bit >= 1.0.2j-59.1
  • openssl >= 1.0.2j-59.1
Patchnames:
SUSE-SLE-DESKTOP-12-SP2-2017-228
SUSE Linux Enterprise Module for Web Scripting 12
  • nodejs4 >= 4.7.3-14.1
  • nodejs4-devel >= 4.7.3-14.1
  • nodejs4-docs >= 4.7.3-14.1
  • nodejs6 >= 6.9.5-7.1
  • nodejs6-devel >= 6.9.5-7.1
  • nodejs6-docs >= 6.9.5-7.1
  • npm4 >= 4.7.3-14.1
  • npm6 >= 6.9.5-7.1
Patchnames:
SUSE-SLE-Module-Web-Scripting-12-2017-221
SUSE-SLE-Module-Web-Scripting-12-2017-476
SUSE Linux Enterprise Server 12 SP2
  • libopenssl-devel >= 1.0.2j-59.1
  • libopenssl1_0_0 >= 1.0.2j-59.1
  • libopenssl1_0_0-32bit >= 1.0.2j-59.1
  • libopenssl1_0_0-hmac >= 1.0.2j-59.1
  • libopenssl1_0_0-hmac-32bit >= 1.0.2j-59.1
  • openssl >= 1.0.2j-59.1
  • openssl-doc >= 1.0.2j-59.1
Patchnames:
SUSE-SLE-SERVER-12-SP2-2017-228
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
  • libopenssl-devel >= 1.0.2j-59.1
  • libopenssl1_0_0 >= 1.0.2j-59.1
  • libopenssl1_0_0-hmac >= 1.0.2j-59.1
  • openssl >= 1.0.2j-59.1
  • openssl-doc >= 1.0.2j-59.1
Patchnames:
SUSE-SLE-RPI-12-SP2-2017-228
SUSE Linux Enterprise Software Development Kit 12 SP2
  • libopenssl-devel >= 1.0.2j-59.1
  • openssl >= 1.0.2j-59.1
Patchnames:
SUSE-SLE-SDK-12-SP2-2017-228
openSUSE Leap 42.1
  • nodejs >= 4.7.3-39.1
  • nodejs-debuginfo >= 4.7.3-39.1
  • nodejs-debugsource >= 4.7.3-39.1
  • nodejs-devel >= 4.7.3-39.1
  • nodejs-docs >= 4.7.3-39.1
  • npm >= 4.7.3-39.1
Patchnames:
openSUSE-2017-284
openSUSE Leap 42.2
  • libopenssl-devel >= 1.0.2j-4.1
  • libopenssl-devel-32bit >= 1.0.2j-4.1
  • libopenssl1_0_0 >= 1.0.2j-4.1
  • libopenssl1_0_0-32bit >= 1.0.2j-4.1
  • libopenssl1_0_0-debuginfo >= 1.0.2j-4.1
  • libopenssl1_0_0-debuginfo-32bit >= 1.0.2j-4.1
  • libopenssl1_0_0-hmac >= 1.0.2j-4.1
  • libopenssl1_0_0-hmac-32bit >= 1.0.2j-4.1
  • nodejs4 >= 4.7.3-5.3.1
  • nodejs4-debuginfo >= 4.7.3-5.3.1
  • nodejs4-debugsource >= 4.7.3-5.3.1
  • nodejs4-devel >= 4.7.3-5.3.1
  • nodejs4-docs >= 4.7.3-5.3.1
  • npm4 >= 4.7.3-5.3.1
  • openssl >= 1.0.2j-4.1
  • openssl-debuginfo >= 1.0.2j-4.1
  • openssl-debugsource >= 1.0.2j-4.1
  • openssl-doc >= 1.0.2j-4.1
Patchnames:
openSUSE-2017-256
openSUSE-2017-442