CVE-2012-0884

Published: 12 March 2012

The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.

Notes

only affects CMS, PKCS #7, or S/MIME decryption, not SSL/TLS
transactions

from oss-security: "If a Linux distribution picks up the fix for
CVE-2012-0884 then they will want to pick up change 22161 at the
same time since the fix for the security vulnerability will
generally cause symmetric decryption errors when it kicks in and
things get very confusing for the end user without change 22161"
A second issue was fixed too, see:
http://www.openwall.com/lists/oss-security/2012/05/11/5

Status

References

• http://www.openssl.org/news/secadv_20120312.txt
• https://ubuntu.com/security/notices/USN-1451-1
• https://www.cve.org/CVERecord?id=CVE-2012-0884
• NVD
• Launchpad
• Debian