Erlang/OTP SSL证书链构建DoS漏洞修复分析

漏洞概述 该漏洞涉及SSL/TLS证书链构建过程中的问题，可能导致拒绝服务（DoS）攻击。具体表现为在处理多余和未排序的证书时，可能产生循环，从而引发DoS攻击。此外，还增加了构建链长度的深度限制检查。 影响范围 受影响组件： 和 影响版本：OTP-27.3.4.15 修复方案 1. 增加深度限制检查： - 在 函数中，增加了对构建链长度的深度限制检查，防止过长的链导致问题。 2. 使用有向图确保鲁棒的证书链构建： - 引入了 模块来确保证书链的构建更加鲁棒，避免循环和多余证书的问题。 - 新增了 函数，用于生成候选路径，确保路径的正确性和完整性。 3. 测试用例更新： - 在 中增加了多个测试用例，包括 和 ，用于验证修复后的代码能够正确处理恶意循环和未排序的证书链。 POC代码 以下是部分关键代码块的提取： ```erlang % lib/ssl/src/ssl_certificate.erl %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {ok, CertDBHandle, CertsDBRef, Chain, ListDB} | %% {error, Reason} %% @end %% @doc build_certificate_chain/3 %% @end %% @spec build_certificate_chain(Cert, CertDBHandle, CertsDBRef, Chain, ListDB) -> %% {

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Erlang/OTP SSL证书链构建DoS漏洞修复分析

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Erlang/OTP SSL证书链构建DoS漏洞修复分析

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！