The vulnerabilities of the functions DH_check(), DH_check_ex(), and EVP_PKEY_param_check() in the OpenSSL library allow a attacker to cause a service failure.

🗓️ 29 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL DH and parameter check flaws from excessive iteration enable remote service failures.

Reporter	Title	Published	Views	Family All 673
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-yaml, OpenSSL, GnuTLS , OpenTelemetry-Go, go-toolset and urllib3	30 Jan 202408:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.	1 May 202420:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Open Source affect Cloud Pak System	28 Oct 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to OpenSSL. (CVE-2023-3446)	12 Dec 202309:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management is vulnerable to a denial of service from a flaw in DH keys or parameters in OpenSSL (CVE-2023-3817)	25 Oct 202420:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase	13 Mar 202414:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	14 Mar 202405:23	–	ibm

Vulners

Node

novell suse_caas_platformMatch4.0

novell suse_manager_proxyMatch4.2

novell suse_manager_serverMatch4.2

novell suse_linux_enterprise_microMatch5.1

novell suse_manager_retail_branch_serverMatch4.2

novell suse_linux_enterprise_microMatch5.2

novell suse_manager_retail_branch_serverMatch4.3

novell suse_manager_proxyMatch4.3

novell suse_manager_serverMatch4.3

novell suse_enterprise_storageMatch7.1

novell suse_linux_enterprise_microMatch5.3

novell suse_linux_enterprise_microMatch5.4

openssl opensslRange3.0.0–3.0.10

red_hat red_hat_jboss_core_servicesMatch1

project_harbor harborMatch2.7.0

node.js node.jsRange≤18.17.0

camunda_services_gmbh camunda_modelerMatch5.15.1

openssl opensslRange3.1.0–3.1.2

openssl opensslRange1.1.1–1.1.1v

openssl opensslRange1.0.2–1.0.2zi

novell opensuse_leapMatch15.5

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.4

red_hat red_hat_enterprise_linuxMatch9

novell opensuse_leap_microMatch5.3

canonical ubuntuMatch23.04

novell opensuse_leap_microMatch5.4

canonical ubuntuMatch23.10

novell suse_liberty_linuxMatch8

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Jul/43
openwall	www.openwall.com/lists/oss-security/2023/07/31/1
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00019.html
security	www.security.netapp.com/advisory/ntap-20230818-0014/
openssl	www.openssl.org/news/secadv/20230731.txt
vuldb	www.vuldb.com/ru/

01 Jun 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 35.3

EPSS0.05533