The vulnerability of the X509_V_FLAG_CRL_CHECK component in the OpenSSL cryptographic library allows a attacker to trigger a service failure.

🗓️ 01 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

OpenSSL certificate revocation flag vulnerability may read beyond memory bounds to trigger failure.

Reporter	Title	Published	Views	Family All 143
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	21 Mar 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Message Security on IBM i platform is affected by multiple issues in OpenSSL (CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0216, CVE-2023-0217, CVE-2023-0401)	22 Jun 202317:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities	25 Jul 202313:36	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	4 Oct 202311:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerability affects IBM® MobileFirst Platform	19 Apr 202304:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Observability with Instana (Agent container image)	17 Oct 202314:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating OpenSSL	31 Oct 202314:57	–	ibm

Vulners

Node

openssl opensslRange3.0–3.0.8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

canonical ubuntuMatch22.10

Source	Link
openssl-library	www.openssl-library.org/news/secadv/20230207.txt
security	www.security.gentoo.org/glsa/202402-08
github	www.github.com/openssl/openssl/commit/c927a3492698c254637da836762f9b1f86cffabc
access	www.access.redhat.com/security/cve/cve-2022-4203
ubuntu	www.ubuntu.com/security/CVE-2022-4203
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-4203
web	www.web.nvd.nist.gov/view/vuln/detail

01 Nov 2024 00:00Current

7High risk

Vulners AI Score7

CVSS 34.9

CVSS 26.8

EPSS0.01481

OpenSSL Certificate Revocation List Memory Boundary Read Service Failure Trigger Crypto Library Vulnerability