Lucene search

K
oraclelinuxOracleLinuxELSA-2023-1405
HistoryMar 22, 2023 - 12:00 a.m.

openssl security update

2023-03-2200:00:00
linux.oracle.com
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.1%

[1:1.1.1k-9]

  • Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  • Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  • Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  • Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
    [1:1.1.1k-8]
  • Fix no-ec build
    Resolves: rhbz#2071020

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

54.1%