CVE-2023-0466

🗓️ 28 Mar 2023 14:30:49Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 354 Views

X509_VERIFY_PARAM_add0_policy() implementation allows invalid certificate policies to pass verification

Reporter	Title	Published	Views	Family All 306
IBM Security Bulletins	Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.	28 Mar 202419:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access.	17 Jan 202415:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V	4 Apr 202418:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from systemd, libcap, openssl-libs, libxml2, go-toolset, and prometheus-operator	28 Aug 202308:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	24 Jul 202317:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor openssl 1.1.1 End of Life	5 Oct 202320:31	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerabilities affect IBM® MobileFirst Platform	8 Aug 202310:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in FOS firmware used by IBM b-type SAN directors and switches.	1 May 202421:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, OpenSSL, trim, and Chalk ansi-regex module might affect IBM Storage Defender – Data Protect	31 Oct 202316:13	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2zh

openssl opensslRange1.1.1–1.1.1u

openssl opensslRange3.0.0–3.0.9

openssl opensslRange3.1.0–3.1.1

[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.1.1",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.9",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1u",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zh",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202402-08
lists	www.lists.debian.org/debian-lts-announce/2023/06/msg00011.html
debian	www.debian.org/security/2023/dsa-5417
openssl	www.openssl.org/news/secadv/20230328.txt
openwall	www.openwall.com/lists/oss-security/2023/09/28/4
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20230414-0001/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/

19 Feb 2025 18:15Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.3

EPSS0.00848

SSVC

CWE-295