ASN.1 BIO excessive memory allocation (CVE-2016-2109)
该报告还没有中文解读。
原文摘录
摘自原文（1413 字符中的一小部分）
On 4 April 2016 I reported a bug to the OpenSSL Security Team where I was able to force OpenSSL to use large amounts of cpu time, memory and swap space. They confirmed receipt on 6 April 2016 and on 22 April 2016 I was notified that they were assigning CVE-2016-2109 to this flaw and the fix was …
原文中的代码
The main cause is the way asn1_d2i_read_bio works: it allocates memory depending on the length field. Your test cases looks like this: 30 84 30 30 30 30 30 Which translates to a SEQUENCE with a length of 0x30303030 which explains the huge memory requirements. In some cases this is intended (for …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Internet Bug Bounty 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @geeknik · 版权归作者与 Internet Bug Bounty 所有