FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

LibreSSL -- Memory leak and buffer overflow

Affected packages
libressl < 2.2.4


VuXML ID e75a96df-73ca-11e5-9b45-b499baebfeaf
Discovery 2015-10-15
Entry 2015-10-16
Modified 2015-10-26

Qualys reports:

During the code review of OpenSMTPD a memory leak and buffer overflow (an off-by-one, usually stack-based) were discovered in LibreSSL's OBJ_obj2txt() function. This function is called automatically during a TLS handshake (both client-side, unless an anonymous mode is used, and server-side, if client authentication is requested).


CVE Name CVE-2015-5333
CVE Name CVE-2015-5334