CVE-2023-0215

🗓️ 08 Feb 2023 19:03:28Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 951 Views

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities

Reporter	Title	Published	Views	Family All 614
IBM Security Bulletins	Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2023-0215).	21 Sep 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities	7 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple OpenSSl denial of service vulnerabilities.	5 Jul 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Access Appliance has multiple security vulnerabilities	14 Oct 202305:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2022-4304, CVE-2023-0215, CVE-2023-0286]	27 Sep 202411:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase	3 Oct 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect AIX	21 Mar 202320:07	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of OpenSSL, IBM Virtualization Engine TS7700 is vulnerable to denial of service (CVE-2023-0215, CVE-2023-0286) and information disclosure (CVE-2022-4304)	30 May 202319:33	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2zg

openssl opensslRange1.1.1–1.1.1t

openssl opensslRange3.0.0–3.0.8

Node

stormshield stormshield_management_centerRange<3.3.3

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.0.8",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1t",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zg",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202402-08
security	www.security.netapp.com/advisory/ntap-20230427-0009/
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20230427-0007/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20240621-0006/
openssl	www.openssl.org/news/secadv/20230207.txt
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003

04 Nov 2025 20:16Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5

EPSS0.0043

SSVC

CWE-416