Lucene search
OpenSSLOPENSSL:CVE-2023-5363HistoryOct 24, 2023 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2023-5363
2023-10-2400:00:00
www.openssl.org
24
openssl
bug
potential truncation
overruns
symmetric ciphers
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
45.3%
Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.
Related
mageia
mageia
Updated openssl packages fix a security vulnerability
2023-11-09 15:55:51
Updated quictls packages fix a security vulnerability
2023-11-12 03:44:53
nessus
nessus
Photon OS 5.0: Openssl PHSA-2023-5.0-0124
2024-07-23 00:00:00
RHEL 9 : openssl (RHSA-2024:0500)
2024-01-25 00:00:00
oraclelinux
oraclelinux
openssl security update
2024-01-22 00:00:00
openssl security update
2024-01-25 00:00:00
nvd
nvd
CVE-2023-5363
2023-10-25 18:17:43
cve
cve
CVE-2023-5363
2023-10-25 18:17:43
debian
debian
[SECURITY] [DSA 5532-1] openssl security update
2023-10-24 19:19:01
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
almalinux
almalinux
Moderate: openssl security update
2024-01-22 00:00:00
ibm
ibm
redhatcve
redhatcve
CVE-2023-5363
2023-10-25 11:57:11
freebsd
freebsd
OpenSSL -- potential loss of confidentiality
2023-10-24 00:00:00
osv
osv
CGA-q7hj-3v56-vm7c
2024-06-06 12:26:17
Moderate: openssl security update
2024-01-22 00:00:00
CVE-2023-5363
2023-10-25 18:17:43
cgr
cgr
CVE-2023-5363 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0313)
2023-11-10 00:00:00
Debian: Security Advisory (DSA-5532-1)
2023-10-25 00:00:00
alpinelinux
alpinelinux
CVE-2023-5363
2023-10-25 18:17:43
cbl_mariner
cbl_mariner
redhat
redhat
(RHSA-2024:0500) Moderate: openssl security update
2024-01-25 16:25:40
(RHSA-2024:0310) Moderate: openssl security update
2024-01-22 01:04:54
cvelist
cvelist
CVE-2023-5363 Incorrect cipher key & IV length processing
2023-10-24 15:31:40
debiancve
debiancve
CVE-2023-5363
2023-10-25 18:17:43
ubuntucve
ubuntucve
CVE-2023-5363
2023-10-24 00:00:00
redos
redos
ROS-20231110-02
2023-11-10 00:00:00
ROS-20240409-06
2024-04-09 00:00:00
ROS-20231109-01
2023-11-09 00:00:00
veracode
veracode
Information Disclosure
2023-10-28 00:48:09
f5
f5
K000138177 : OpenSSL vulnerability CVE-2023-5363
2024-01-10 00:00:00
wolfi
wolfi
CVE-2023-5363 vulnerabilities
2024-09-10 09:11:22
nodejsblog
nodejsblog
OpenSSL Recent Security Patches
2023-10-26 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0124
2023-10-24 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0496
2023-10-25 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-10-24 00:00:00
cloudfoundry
cloudfoundry
USN-6450-1: OpenSSL vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
aix
aix
ics
ics
Siemens SIMATIC RTLS Locating Manager
2024-05-16 12:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
45.3%
Related for OPENSSL:CVE-2023-5363