The vulnerability of the AES-XTS encryption algorithm in the OpenSSL library, which allows a hacker to trigger a service failure.

🗓️ 29 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

OpenSSL Advanced Encryption Standard XTS mode vulnerability permits service interruptions by reading beyond memory bounds.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	22 Nov 202315:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V	4 Apr 202418:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to the Improper Restriction of Operations within Memory Buffer in the RHEL UBI (CVE-2023-1255, CVE-2023-2650)	31 Jul 202414:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities	25 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for VMware	4 Apr 202418:41	–	ibm
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-181)	24 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssl (ALSA-2023:3722)	26 Jun 202300:00	–	nessus
Tenable Nessus	Juniper Junos OS Multiple Vulnerabilities (JSA82974)	28 Apr 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : openssl-3.0.7-16.el9 (AXSA:2023-6111:06)	20 Jan 202600:00	–	nessus
Tenable Nessus	Tenable Nessus < 10.5.3 Multiple Vulnerabilities (TNS-2023-22)	4 Jul 202300:00	–	nessus

Vulners

Node

openssl opensslRange3.0.0–3.0.9

openssl opensslRange3.1.0–3.1.1

node.js node.jsRange<18.17.0

red_hat red_hat_enterprise_linuxMatch9

fedora fedoraMatch37

canonical ubuntuMatch22.10

fedora fedoraMatch38

canonical ubuntuMatch23.04

Source	Link
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
vuldb	www.vuldb.com/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023072566
nodejs	www.nodejs.org/download/release/v18.17.0/node-v18.17.0-x64.msi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IGWYXCBOJHBE4KDZDQOUYC43RNMHRDBL/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/J6OR7PVNTELF5NATAMOMQWNTKHVAOW4O/https://ubuntu.com/security/notices/USN-6119-1
ubuntu	www.ubuntu.com/security/notices/USN-6119-1
access	www.access.redhat.com/errata/RHSA-2023:3722
web	www.web.nvd.nist.gov/view/vuln/detail

15 Apr 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.4

CVSS 35.9

EPSS0.00953