IBM Support

Security Bulletin: Vulnerabilities in OpenSSL affect AIX (CVE-2019-1547, CVE-2019-1563)

Security Bulletin


Summary

There are vulnerabilities in OpenSSL used by AIX.

Vulnerability Details

CVEID:   CVE-2019-1547
DESCRIPTION:   Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/167020 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)


CVEID:   CVE-2019-1563
DESCRIPTION:   In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/167022 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s)Version(s)
AIX7.1
AIX7.2
VIOS2.2
VIOS3.1

 

The following fileset levels are vulnerable:
        
key_fileset = osrcaix
 
FilesetLower LevelUpper LevelKey
openssl.base1.0.2.5001.0.2.1801key_w_fs
openssl.base20.13.102.100020.16.102.1801key_w_fs
 
Note:
        A. 0.9.8, 1.0.1 OpenSSL versions are out-of-support. Customers are advised to upgrade to currently supported OpenSSL 1.0.2 version.
 
        B. Latest level of OpenSSL fileset is available from the web download site:
  
To find out whether the affected filesets are installed on your systems, refer to the lslpp command found in the AIX user's guide.
 
Example:  lslpp -L | grep -i openssl.base

Remediation/Fixes

FIXES
 
A fix is available, and it can be downloaded from:
 
 
To extract the fixes from the tar file:
 
For Openssl 1.0.2 version - 
zcat openssl-1.0.2.2000.tar.Z | tar xvf -
 
For 1.0.2 FIPS capable openssl version -
zcat openssl-20.16.102.2000.tar.Z | tar xvf -
                 
 
IMPORTANT: If possible, it is recommended that a mksysb backup of the system be created.  Verify it is both bootable and readable before proceeding.
 
Note that all the previously reported security vulnerability fixes are also included in above mentioned fileset level. Please refer to the readme file (provided along with the fileset) for the complete list of vulnerabilities fixed.
 
To preview the fix installation:
 
installp -apYd . openssl
 
To install the fix package:
 
installp -aXYd . openssl
                        
            
openssl dgst -sha1 -verify [pubkey_file] -signature [advisory_file].sig [advisory_file]
 
openssl dgst -sha1 -verify [pubkey_file] -signature [ifix_file].sig [ifix_file]
 
Published advisory OpenSSL signature file location:
 

Workarounds and Mitigations

None

Get Notified about Future Security Bulletins

Subscribe to My Notifications to be notified of important product support alerts like this.

References

Complete CVSS v3 Guide
On-line Calculator v3

Off

Related Information

IBM Secure Engineering Web Portal
IBM Product Security Incident Response Blog

AIX Security Bulletin (ASCII format)

Change History

19 Nov 2019: Initial Publication

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

Disclaimer

Review the IBM security bulletin disclaimer and definitions regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment.

Document Location

Worldwide

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG10","label":"AIX"},"Component":"AIX","Platform":[{"code":"PF002","label":"AIX"}],"Version":"7.1,7.2","Edition":"All","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
20 December 2019

UID

ibm11116033

Page Feedback