freebsd security - Mar 2016 - openssl bug causes sshd crashed on FreeBSD 9.3-RELEASE

Hello,

I got the same problem here.

After updating to FreeBSD 9.3-RELEASE-p37 sshd from the base system crashes by
signal 11 when I connect to the server with an old ssh client (e.g.
OpenSSH_4.5p1).
Using a newer ssh client versions (e.g. OpenSSH_6.6.1p1 from FreeBSD
9.3-RELEASE-p10) the sshd works fine.

Best Regards

Frank Moeller

-- 
Frank M"oller <moeller at GONICUS.de>
GONICUS GmbH
> On FreeBSD 9.3-RELEASE-p37, sshd crashes by signal 11.
> Mar? 8 17:32:20 hostname kernel: pid 22651 (sshd), uid 0: exited on
> signal 11
> 
> On FreeBSD 10.1-RELEASE-p30, sshd works fine.
> 
> As far as I have examined, the reason is OpenSSL in base system.
> The following tests have been performed on FreeBSD 9.3-RELEASE-p37:
> 
> (1) sshd in base system crashes.
> (2) openssh-portable from pkg which uses base OpenSSL library crashes.
> (3) openssh-portable from ports with OpenSSL from pkg works fine.
> 
> Therefore, I suggest that the openssl library in base system
> might have a problem.
> 
> Best Regards,
> ----
> Akihiro HIRANO, Kanazawa University
> hirano at t.kanazawa-u.ac.jp

Hi,

On 2016/03/09 19:59, Frank M?ller wrote:
> I got the same problem here.
>
> After updating to FreeBSD 9.3-RELEASE-p37 sshd from the base system crashes
by signal 11
 > when I connect to the server with an old ssh client (e.g.
OpenSSH_4.5p1).
> Using a newer ssh client versions (e.g. OpenSSH_6.6.1p1 from FreeBSD
9.3-RELEASE-p10)
 > the sshd works fine.

Hum... I tried OpenSSH_6.6.1p1 client on 9.3-RELEASE-p37
and OpenSSH_6.4p1 client on 10.0-RELEASE-p18.
Both clients cause sshd on 9.3-RELEASE-p37 crashed by signal 11.


Another admin states that postfix smtpd also has the same problem.
Using security/openssl is also a workaround for this case.


Best Regards,
----
Akihiro HIRANO, Kanazawa University
hirano at t.kanazawa-u.ac.jp