The vulnerabilities of the functions d2i_PKCS7(), d2i_PKCS7_bio(), or d2i_PKCS7_fp() implemented in the PKCS #7 standard of the OpenSSL cryptographic library allow a perpetrator to cause a service failure.

🗓️ 26 Apr 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Pointer arithmetic errors in OpenSSL Public Key Standards seven d2i functions may cause service disruption.

Reporter	Title	Published	Views	Family All 140
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	21 Mar 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Message Security on IBM i platform is affected by multiple issues in OpenSSL (CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0216, CVE-2023-0217, CVE-2023-0401)	22 Jun 202317:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities	25 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	4 Oct 202311:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerability affects IBM® MobileFirst Platform	19 Apr 202304:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by a denial of service due to OpenSSL vulnerabilities	10 Oct 202313:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Observability with Instana (Agent container image)	17 Oct 202314:45	–	ibm

Vulners

Node

novell suse_manager_retail_branch_serverMatch4.3

OR

novell suse_manager_proxyMatch4.3

OR

novell suse_manager_serverMatch4.3

OR

openssl opensslRange3.0.0–3.0.7

OR

novell opensuse_leapMatch15.4

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-openssl-cve-2022-4304-cve-2022-4450-cve-2023-0286/
access	www.access.redhat.com/security/cve/CVE-2023-0216
openssl	www.openssl.org/news/secadv/20230207.txt
suse	www.suse.com/security/cve/CVE-2023-0216.html
git	www.git.openssl.org/gitweb/
web	www.web.nvd.nist.gov/view/vuln/detail

19 Aug 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 37.5

CVSS 27.8

EPSS0.01846

open ssl vulnerability pointer arithmetic service disruption public key standards