mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-15 06:01:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
9e0094e2aa
openssl/crypto
History
Matt Caswell 9e0094e2aa Fix DH_check() excessive time with over sized modulus 
The DH_check() function checks numerous aspects of the key or parameters
that have been supplied. Some of those checks use the supplied modulus
value even if it is excessively large.

There is already a maximum DH modulus size (10,000 bits) over which
OpenSSL will not generate or derive keys. DH_check() will however still
perform various tests for validity on such a large modulus. We introduce a
new maximum (32,768) over which DH_check() will just fail.

An application that calls DH_check() and supplies a key or parameters
obtained from an untrusted source could be vulnerable to a Denial of
Service attack.

The function DH_check() is itself called by a number of other OpenSSL
functions. An application calling any of those other functions may
similarly be affected. The other functions affected by this are
DH_check_ex() and EVP_PKEY_param_check().

CVE-2023-3446

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/21451)
2023-07-19 11:20:04 +02:00
..
aes Fix typos found by codespell 2023-07-18 18:54:45 +10:00
aria
asn1 Add more fixes for WebAssembly/WASI build 2023-07-12 10:50:09 +10:00
async Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
bf Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
bio Add limited support for WebAssembly WASI target 2023-07-06 12:54:17 +10:00
bn Check for 0 modulus in BN_RECP_CTX_set. 2023-06-26 08:07:55 +10:00
buffer Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
camellia
cast Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
chacha Ensure there's only one copy of OPENSSL_armcap_P in libcrypto.a 2023-03-29 12:21:31 +02:00
cmac Update CMAC test cases. 2023-06-12 08:36:08 +02:00
cmp CMP: add support for genm with rootCaCert and genp with rootCaKeyUpdate 2023-07-17 08:48:36 +10:00
cms Remove redundant check 2023-07-18 20:41:17 +02:00
comp Add zlib oneshot compression 2022-11-07 11:23:13 +01:00
conf conf/conf_sap.c: correct return of ossl_config_int() in UEFI system 2023-06-30 16:56:02 +02:00
crmf CMS, PKCS7, and CRMF: simplify use of EVP_PKEY_decrypt() by helper function 2023-05-30 22:02:10 +02:00
ct Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
des Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
dh Fix DH_check() excessive time with over sized modulus 2023-07-19 11:20:04 +02:00
dsa fix memory allocation and reference counting issues 2023-07-05 08:34:00 +10:00
dso dso: update to structure based atomics 2023-07-01 21:18:25 +10:00
ec Changes to resolve symbol conflict due to gf_mul 2023-07-14 08:44:26 +10:00
encode_decode Optimise PKEY decoders 2023-07-17 08:12:06 +10:00
engine engine: update to structure based atomics 2023-07-01 21:18:08 +10:00
err Raise SSL_R_QUIC_PROTOCOL_ERROR on any QUIC protocol error 2023-07-18 20:37:52 +02:00
ess Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
evp Fix typos found by codespell 2023-07-18 18:54:45 +10:00
ffc FFC cleanups 2023-04-03 10:31:04 +02:00
hmac
hpke Fix typos found by codespell 2023-06-15 10:11:46 +10:00
http Modified OSSL_parse_url to initialize pport_num to 0. 2023-07-14 12:04:38 +02:00
idea Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
kdf
lhash Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 2022-10-07 10:05:50 +02:00
md2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
md4 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
md5 fix md5 bug on aarch64 big-endian plantform. 2023-04-28 14:36:35 +02:00
mdc2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
modes riscv: Clarify dual-licensing wording for GCM and AES 2023-07-06 12:53:27 +10:00
objects feat: add missing pki / pmi object identifiers 2023-06-29 09:29:56 +10:00
ocsp Fix incomplete check on X509V3_add1_i2d() 2023-01-31 11:05:51 +11:00
pem Avoid dangling ptrs in header and data params for PEM_read_bio_ex 2023-02-07 17:05:10 +01:00
perlasm riscv: Clarify dual-licensing wording for GCM and AES 2023-07-06 12:53:27 +10:00
pkcs7 CMS, PKCS7, and CRMF: simplify use of EVP_PKEY_decrypt() by helper function 2023-05-30 22:02:10 +02:00
pkcs12 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
poly1305 Fix typos found by codespell 2023-07-18 18:54:45 +10:00
property Only call OPENSSL_init_crypto on fetch if using the default libctx 2023-02-22 10:03:14 +11:00
rand rand_lib: RAND_poll: Reseed in non-"no-deprecated" builds. 2023-06-14 09:03:14 +10:00
rc2 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
rc4 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
rc5 Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
ripemd Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
rsa Fix RSA OAEP set/get label for legacy engine 2023-07-17 08:15:06 +10:00
seed Avoid duplicating symbols in legacy.a with some build options 2023-01-31 11:10:22 +11:00
sha Move Keccak rhotates tables to rodata 2023-07-14 11:15:45 +10:00
siphash crypto/*: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
sm2 crypto/sm2/sm2_sign.c: Add BN_CTX_end 2023-06-13 13:37:33 +02:00
sm3 Fix arm64 asm code back compatible issue with gcc 4.9.4 2023-05-31 10:50:28 +10:00
sm4 Fix typos found by codespell 2023-06-15 10:11:46 +10:00
srp add a check for the return of sk_SRP_gN_new_null() so that capture the potential memory error in time 2022-10-20 19:04:44 +11:00
stack stack: fix searching when the stack isn't sorted. 2023-04-28 09:24:06 +02:00
store store: update to structure based atomics 2023-07-01 21:18:25 +10:00
thread Fix no-thread-pool building 2023-07-06 12:55:21 +10:00
ts crypto/*: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
txt_db Coverity 1528487: Avoid assignment of unused value of i 2023-06-10 19:23:59 -04:00
ui Fix stack corruption in ui_read 2023-05-17 12:07:02 +02:00
whrlpool Fix typos found by codespell 2023-07-18 18:54:45 +10:00
x509 x509: update to structure based atomics 2023-07-01 21:18:25 +10:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h Apply aes-gcm unroll8+eor3 optimization patch to Neoverse V2 2023-02-08 16:54:57 +01:00
armcap.c Ensure there's only one copy of OPENSSL_armcap_P in libcrypto.a 2023-03-29 12:21:31 +02:00
armv4cpuid.pl Ensure there's only one copy of OPENSSL_armcap_P in libcrypto.a 2023-03-29 12:21:31 +02:00
asn1_dsa.c
bsearch.c
build.info params: provide a faster TRIE based param lookup. 2023-06-02 15:13:20 +10:00
c64xpluscpuid.pl
context.c Optimise PKEY decoders 2023-07-17 08:12:06 +10:00
core_algorithm.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
core_fetch.c
core_namemap.c return immediately if namemap is NULL 2023-06-18 16:55:09 +10:00
cpt_err.c
cpuid.c
cryptlib.c Fix UEFI support on win32 2023-04-13 10:25:55 +01:00
ctype.c Fixed typos in documentation and comments 2023-01-04 12:53:05 +01:00
cversion.c
der_writer.c
deterministic_nonce.c Fix typos found by codespell 2023-06-15 10:11:46 +10:00
dllmain.c
ebcdic.c
ex_data.c When we're just reading EX_CALLBACK data just get a read lock 2023-05-30 17:26:02 +01:00
getenv.c
ia64cpuid.S
info.c info.c: Fix typos in seed macro name and description string 2023-01-10 12:15:42 +01:00
init.c Add ZSTD compression support (RFC8478bis) 2022-10-18 09:30:21 -04:00
initthread.c
loongarch64cpuid.pl Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 2022-10-12 18:02:12 +11:00
loongarch_arch.h Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 2022-10-12 18:02:12 +11:00
loongarchcap.c Add LoongArch64 cpuid and OPENSSL_loongarchcap_P 2022-10-12 18:02:12 +11:00
LPdir_nyi.c
LPdir_unix.c Cast the argument to unsigned char when calling isdigit() 2023-06-06 15:48:46 +02:00
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c Introduce [HAVE_/NO_]MADVISE defines 2023-06-12 07:56:03 +02:00
mem.c
mips_arch.h
o_dir.c
o_fopen.c crypto: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
o_init.c
o_str.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
o_time.c
packet.c Rationalize FIPS sources 2023-02-08 16:20:55 +01:00
param_build_set.c
param_build.c Fix typos found by codespell 2023-06-15 10:11:46 +10:00
params_dup.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
params_from_text.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
params_idx.c.in params: provide a faster TRIE based param lookup. 2023-06-02 15:13:20 +10:00
params.c crypto/params: drop float for UEFI 2023-05-22 07:45:10 +01:00
pariscid.pl
passphrase.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
ppccap.c
ppccpuid.pl
provider_child.c Fix a potential memory leak in crypto/provider_child.c 2023-02-01 08:20:08 +11:00
provider_conf.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
provider_core.c Optimise PKEY decoders 2023-07-17 08:12:06 +10:00
provider_local.h
provider_predefined.c
provider.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
punycode.c Add more punycode tests and remove ossl_a2ucompare() 2023-02-08 16:17:37 +01:00
quic_vlint.c QUIC: Enable building with QUIC support disabled 2023-01-13 13:20:16 +00:00
README-sparse_array.md
riscv32cpuid.pl
riscv64cpuid.pl
riscvcap.c
s390x_arch.h S390X: Accelerate keccak XOF 2023-03-07 18:21:51 +01:00
s390xcap.c s390xcap.c: Avoid copying structure on initialization 2023-06-28 08:31:07 +10:00
s390xcpuid.pl
self_test_core.c
sleep.c OSSL_sleep(): Calling sleep() function if sleepTime > 1sec 2023-05-30 21:10:03 +02:00
sparccpuid.S
sparcv9cap.c
sparse_array.c
threads_lib.c Define threads_lib.c functions only for OPENSSL_SYS_UNIX 2022-11-14 07:47:53 +00:00
threads_none.c QUIC: Fix bugs where threading is disabled 2023-05-24 10:34:54 +01:00
threads_pthread.c QUIC: Fix bugs where threading is disabled 2023-05-24 10:34:54 +01:00
threads_win.c Add note about Windows LONG 2023-05-24 10:34:55 +01:00
time.c Fix UEFI support on win32 2023-04-13 10:25:55 +01:00
trace.c add OSSL_TRACE_STRING(), OSSL_TRACE_STRING_MAX, and OSSL_trace_string() 2023-01-26 09:16:51 +01:00
uid.c Add more fixes for WebAssembly/WASI build 2023-07-12 10:50:09 +10:00
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl