USN-4662-1

Details

David Benjamin discovered that OpenSSL incorrectly handled comparing certificates containing a EDIPartyName name type. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service.

Affected Packages

openssl

Ubuntu 16.04 LTS

Fixed in:

1.0.2g-1ubuntu4.18

openssl

Ubuntu 18.04 LTS

Fixed in:

1.1.1-1ubuntu2.1~18.04.7

openssl1.0

Ubuntu 18.04 LTS

Fixed in:

1.0.2n-1ubuntu5.5

openssl

Ubuntu 20.04 LTS

Fixed in:

1.1.1f-1ubuntu2.1

References

REPORT

https://ubuntu.com/security/CVE-2020-1971

ADVISORY

https://ubuntu.com/security/notices/USN-4662-1