Secunia

Two vulnerabilities have been reported in OpenSSL, which can be exploited by malicious people to conduct spoofing attacks or cause a DoS (Denial of Service).

1) Certain OpenSSL functions fail to correctly verify the return value of the "EVP_VerifyFinal()" function when validating the signature of DSA and ECDSA keys. This can be exploited to bypass the signature check by e.g. sending a specially crafted signature of a certificate chain to a client.

Successful exploitation requires that the server uses a certificate containing a DSA or ECDSA key.

The vulnerability is reported in versions prior to 0.9.8j.

2) An error in the DTLS implementation can be exploited to crash a DTLS server via a "ChangeCipherSpec" record sent before "ClientHello".

The vulnerability is reported in versions prior to 0.9.8i.

Solution
Update to version 0.9.8j.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits the Google Security Team.
2) Alex Lam

Changelog
Further details available in Customer Area

Original Advisory
OpenSSL:
http://www.openssl.org/news/secadv_20090107.txt
http://rt.openssl.org/Ticket/Display.html?id=1679&user=guest&pass=guest

oCERT:
http://www.ocert.org/advisories/ocert-2008-016.html

Deep Links
Links available in Customer Area