Lucene search

K
mageiaGentoo FoundationMGASA-2023-0313
HistoryNov 09, 2023 - 3:55 p.m.

Updated openssl packages fix a security vulnerability

2023-11-0915:55:51
Gentoo Foundation
advisories.mageia.org
24
openssl
security vulnerability
key length
iv length
update
unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.3%

The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. (CVE-2023-5363)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchopenssl< 3.0.12-1openssl-3.0.12-1.mga9

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.3%