Lucene search
CloudLinuxCLSA-2023:1683236532HistoryMay 04, 2023 - 9:42 p.m.
openssl: Fix of 3 CVEs
2023-05-0421:42:17
repo.cloudlinux.com
77
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
65.1%
- CVE-2023-0464: Fix excessive resource use verifying X.509 policy constraints
- CVE-2023-0466: Fix documentation of X509_VERIFY_PARAM_add0_policy()
- CVE-2022-3996: Drop redundant flag setting in policy_cache_set_mapping()
Related
nessus
nessus
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-04-25 00:00:00
osv
osv
openssl, openssl1.0 vulnerabilities
2023-04-25 15:53:53
CVE-2022-3996
2022-12-13 16:15:22
openssl - security update
2023-06-08 00:00:00
cloudfoundry
cloudfoundry
USN-6039-1: OpenSSL vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6039-1)
2023-04-26 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-1807)
2023-05-09 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-2736)
2023-09-11 00:00:00
prion
prion
Design/Logic Flaw
2022-12-13 16:15:00
Design/Logic Flaw
2023-03-22 17:15:00
Design/Logic Flaw
2023-03-28 15:15:00
debiancve
debiancve
cve
cve
ubuntucve
ubuntucve
alpinelinux
alpinelinux
amazon
amazon
Medium: openssl11
2023-05-11 17:49:00
Medium: openssl
2023-06-05 16:39:00
Medium: openssl
2023-06-05 16:39:00
debian
debian
[SECURITY] [DLA 3449-1] openssl security update
2023-06-08 16:32:36
[SECURITY] [DSA 5417-1] openssl security update
2023-05-31 14:50:37
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2023-0308
2023-01-05 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0308
2023-01-05 00:00:00
nodejsblog
nodejsblog
OpenSSL 3.0.7 update assessment
2022-12-16 00:00:00
redhatcve
redhatcve
github
github
openssl-src subject to DoS by double-checked locking
2022-12-13 18:30:33
openssl
openssl
Vulnerability in OpenSSL CVE-2022-3996
2022-12-13 00:00:00
Vulnerability in OpenSSL CVE-2023-0464
2023-03-21 00:00:00
Vulnerability in OpenSSL CVE-2023-0466
2023-03-21 00:00:00
veracode
veracode
Improper Locking
2023-01-06 08:19:51
Denial Of Service (DoS)
2023-03-25 23:42:35
Authorization Bypass
2023-04-02 10:15:03
wolfi
wolfi
CVE-2022-3996 vulnerabilities
2024-05-04 21:07:06
CVE-2023-0464 vulnerabilities
2024-05-04 21:07:06
cgr
cgr
CVE-2022-3996 vulnerabilities
2024-05-04 21:06:41
CVE-2023-0464 vulnerabilities
2024-05-04 21:06:41
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-06-21 00:00:00
oraclelinux
oraclelinux
openssl security update
2023-08-31 00:00:00
openssl security and bug fix update
2023-06-22 00:00:00
redhat
redhat
fedora
fedora
[SECURITY] Fedora 38 Update: openssl-3.0.9-1.fc38
2023-06-03 02:46:16
[SECURITY] Fedora 37 Update: openssl-3.0.9-1.fc37
2023-06-04 01:24:09
broadcom
broadcom
Excessive Resource Usage Verifying X.509 Policy Constraints (CVE-2023-0464)
2024-04-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-0464 affecting package rust for versions less than 1.68.0-1
2023-10-11 01:41:59
CVE-2023-0464 affecting package openssl 1.1.1k-13
2023-04-20 19:17:28
freebsd
freebsd
OpenSSL -- Excessive Resource Usage Verifying X.509 Policy Constraints
2023-03-23 00:00:00
Python -- multiple vulnerabilities
2022-06-08 00:00:00
OpenSSL -- Multiple vulnerabilities
2023-03-28 00:00:00
f5
f5
K000133706 : OpenSSL vulnerability CVE-2023-0464
2023-04-28 00:00:00
K000134574 : OpenSSL vulnerabilities CVE-2023-0465 and CVE-2023-0466
2023-05-11 00:00:00
redos
redos
ROS-20230407-03
2023-04-07 00:00:00
githubexploit
githubexploit
Exploit for Improper Certificate Validation in Openssl
2023-04-24 06:40:37
rosalinux
rosalinux
Advisory ROSA-SA-2024-2366
2024-03-05 08:46:27
malwarebytes
malwarebytes
Zimbra issues awaited patch for actively exploited vulnerability
2023-07-28 11:30:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-09-11 10:43:54
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
65.1%
Related for CLSA-2023:1683236532