Lucene search

K
cloudlinuxCloudLinuxCLSA-2023:1676025596
HistoryFeb 10, 2023 - 10:39 a.m.

openssl: Fix of 2 CVEs

2023-02-1010:39:56
repo.cloudlinux.com
72
openssl
uaf
x400address
fix
cve-2023-0215
cve-2023-0286

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

72.5%

  • CVE-2023-0215: Fix a UAF resulting from a bug in BIO_new_NDEF
  • CVE-2023-0286: Fix GENERAL_NAME_cmp for x400Address

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

72.5%