In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

The version of HPE Intelligent Management Center (iMC) PLAT installed on the Windows host is prior to 7.3 E0504P04. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified flaw exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-5815)

  - A command injection vulnerability exists in the dbman     service due to improper validation of user-supplied     input before it is passed to a system call. An     unauthenticated, remote attacker can exploit this, via a     specially crafted opcode 10008 request, to inject and     execute arbitrary OS commands with SYSTEM privileges.
    (CVE-2017-5816)

  - Multiple command injection vulnerabilities exist in the     dbman service due to improper validation of     user-supplied input before it is passed to a system     call. An unauthenticated, remote attacker can exploit     these, via a specially crafted opcode 10007 request, to     inject and execute arbitrary OS commands with SYSTEM     privileges. (CVE-2017-5817, CVE-2017-5819)

  - A flaw exists in the dbman service when handling opcode     10007 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     delete arbitrary files with SYSTEM privileges.
    (CVE-2017-5818)

  - A flaw exists in the dbman service when handling opcode     10004 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5820)

  - A flaw exists in the dbman service when handling opcode     10006 and 10010 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially request, to execute     arbitrary code. (CVE-2017-5821)

  - A flaw exists in the dbman service when handling opcode     10010 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5822)

  - A flaw exists in the dbman service when handling opcode     10013 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5823)

  - A NULL pointer deference flaw exists, specifically in     the asn1_item_embed_d2i() function within file     crypto/asn1/tasn_dec.c, when handling the ASN.1 CHOICE     type, which results in a NULL value being passed to the     structure callback if an attempt is made to free certain     invalid encodings. An unauthenticated, remote attacker     can exploit this to cause a denial of service condition.
    (CVE-2016-7053)

  - A heap overflow condition exists in the     chacha20_poly1305_cipher() function within file     crypto/evp/e_chacha20_poly1305.c when handling TLS     connections using *-CHACHA20-POLY1305 cipher suites. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition. (CVE-2016-7054)

  - A carry propagation error exists in the     Broadwell-specific Montgomery multiplication procedure     when handling input lengths divisible by but longer than     256 bits. This can result in transient authentication     and key negotiation failures or reproducible erroneous     outcomes of public-key operations with specially crafted     input. A man-in-the-middle attacker can possibly exploit     this issue to compromise ECDH key negotiations that     utilize Brainpool P-512 curves. (CVE-2016-7055)

  - An unspecified remote code execution vulnerability     exists that allows an unauthenticated, remote attacker     to execute arbitrary code. (CVE-2017-8948)

  - A stack-based buffer overflow condition exists due to     improper validation of input when copying data. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-8956)

Note that Intelligent Management Center (iMC) is an HPE product;
however, it is branded as H3C.

The version of HPE Intelligent Management Center (iMC) PLAT installed on the remote host is prior to 7.3 E0504P04. It is, therefore, affected by multiple vulnerabilities :

  - A NULL pointer deference flaw exists, specifically in     the asn1_item_embed_d2i() function within file     crypto/asn1/tasn_dec.c, when handling the ASN.1 CHOICE     type, which results in a NULL value being passed to the     structure callback if an attempt is made to free certain     invalid encodings. An unauthenticated, remote attacker     can exploit this to cause a denial of service condition.
    (CVE-2016-7053)

  - A heap overflow condition exists in the     chacha20_poly1305_cipher() function within file     crypto/evp/e_chacha20_poly1305.c when handling TLS     connections using *-CHACHA20-POLY1305 cipher suites. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition. (CVE-2016-7054)

  - A carry propagation error exists in the     Broadwell-specific Montgomery multiplication procedure     when handling input lengths divisible by but longer than     256 bits. This can result in transient authentication     and key negotiation failures or reproducible erroneous     outcomes of public-key operations with specially crafted     input. A man-in-the-middle attacker can possibly exploit     this issue to compromise ECDH key negotiations that     utilize Brainpool P-512 curves. (CVE-2016-7055)

  - An unspecified flaw exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-5815)

  - A command injection vulnerability exists in the dbman     service due to improper validation of user-supplied     input before it is passed to a system call. An     unauthenticated, remote attacker can exploit this, via a     specially crafted opcode 10008 request, to inject and     execute arbitrary OS commands with SYSTEM privileges.
    (CVE-2017-5816)

  - Multiple command injection vulnerabilities exist in the     dbman service due to improper validation of     user-supplied input before it is passed to a system     call. An unauthenticated, remote attacker can exploit     these, via a specially crafted opcode 10007 request, to     inject and execute arbitrary OS commands with SYSTEM     privileges. (CVE-2017-5817, CVE-2017-5819)

  - A flaw exists in the dbman service when handling opcode     10007 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     delete arbitrary files with SYSTEM privileges.
    (CVE-2017-5818)

  - A flaw exists in the dbman service when handling opcode     10004 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5820)

  - A flaw exists in the dbman service when handling opcode     10006 and 10010 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially request, to execute     arbitrary code. (CVE-2017-5821)

  - A flaw exists in the dbman service when handling opcode     10010 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5822)

  - A flaw exists in the dbman service when handling opcode     10013 requests due to improper validation of     user-supplied input. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     execute arbitrary code. (CVE-2017-5823)

  - An unspecified remote code execution vulnerability     exists that allows an unauthenticated, remote attacker     to execute arbitrary code. (CVE-2017-8948)

  - A stack-based buffer overflow condition exists due to     improper validation of input when copying data. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-8956)

Note that Intelligent Management Center (iMC) is an HPE product;
however, it is branded as H3C.

According to its banner, the version of OpenSSL on the remote host is version 1.1.0 prior to 1.1.0c and is affected by multiple vulnerabilities :

 - A NULL pointer dereference flaw exists in the 'asn1_item_embed_d2i()' function in 'crypto/asn1/tasn_dec.c' that is triggered when handling the ASN.1 CHOICE type. This may allow a remote attacker to crash a process linked against the library. (CVE-2016-7053)
 - An overflow condition exists in the 'chacha20_poly1305_cipher()' function in 'crypto/evp/e_chacha20_poly1305.c' that is triggered when handling TLS connections using *-CHACHA20-POLY1305 ciphersuites. This may allow a remote attacker to cause a heap-based buffer overflow and crash a process linked against the library. (CVE-2016-7054)
 - A carry propagating flaw exists in the Broadwell-specific Montgomery multiplication procedure that leads to incorrect results. This may result in transient authentication and key negotiation failures, reproducible erroneous outcomes of public-key operations, or potentially attacks against ECDH key negotiation in very atypical cases. (CVE-2016-7055)

The version of OpenSSL installed on the remote host is prior to 1.1.0c. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.0c advisory.

  - There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL     1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis     suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine     in question is not used in operations with the private key itself and an input of the attacker's direct     choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or     reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms     only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was     not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients     have to choose the curve in question and the server has to share the private key among them, neither of     which is default behaviour. Even then only clients that chose the curve will be affected. (CVE-2016-7055)

  - In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to     a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not     considered to be exploitable beyond a DoS. (CVE-2016-7054)

  - In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer     dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can     result in a NULL value being passed to the structure callback if an attempt is made to free certain     invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.
    (CVE-2016-7053)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

OpenSSL reports :

- ChaCha20/Poly1305 heap-buffer-overflow (CVE-2016-7054) Severity:
High TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

- CMS Null dereference (CVE-2016-7053) Severity: Medium Applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

- Montgomery multiplication may produce incorrect results (CVE-2016-7055)i Severity: Low There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure that handles input lengths divisible by, but longer than 256 bits.

ID	Name	Product	Family	Severity
100869	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	Nessus	Windows	critical
100868	H3C / HPE Intelligent Management Center PLAT < 7.3 E0504P04 Multiple Vulnerabilities	Nessus	Misc.	critical
9800	OpenSSL 1.1.0 < 1.1.0c Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	high
94963	OpenSSL 1.1.0 < 1.1.0c Multiple Vulnerabilities	Nessus	Web Servers	high
94691	FreeBSD : openssl -- multiple vulnerabilities (50751310-a763-11e6-a881-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2016-7053

high

Tenable Plugins

critical

critical

high

high

high