I had same problem on Ubuntu 18.04 host.

stunnel4 -v
[ ] Clients allowed=500
[.] stunnel 5.44 on x86_64-pc-linux-gnu platform
[.] Compiled with OpenSSL 1.1.0g  2 Nov 2017
[.] Running  with OpenSSL 1.1.1  11 Sep 2018
[.] Update OpenSSL shared libraries or rebuild stunnel
[.] Threading:PTHREAD Sockets:POLL,IPv6,SYSTEMD TLS:ENGINE,FIPS,OCSP,PSK,SNI 
Auth:LIBWRAP
[ ] errno: (*__errno_location ())
[!] Invalid configuration file name "-v"
[!] realpath: No such file or directory (2)

I found "Double free attempt" messages before INTERNAL ERROR in the log
file.

2019.12.09 21:21:06 LOG5[ui]: Terminated
2019.12.09 21:21:06 LOG2[ui]: Double free attempt: ptr=0x7f48b000e680 
alloc=client.c:1398 free#1=client.c:1410 free#2=ssl.c:117
2019.12.09 21:21:06 LOG2[ui]: Double free attempt: ptr=0x7f48ac007610 
alloc=client.c:1398 free#1=client.c:1410 free#2=ssl.c:117
INTERNAL ERROR: Bad magic at ssl.c, line 117
-----
2019.12.10 12:26:02 LOG5[ui]: Terminated
2019.12.10 12:26:02 LOG2[ui]: Double free attempt: ptr=0x7f8e3c005480 
alloc=../crypto/evp/digest.c:51 free#1=../crypto/evp/digest.c:57 
free#2=ssl.c:117
INTERNAL ERROR: Bad magic at ssl.c, line 117

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1847275

Title:
  stunnel4: "INTERNAL ERROR: Bad magic at ssl.c, line 117" - DoS
  vulnerability

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/stunnel4/+bug/1847275/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to