Lucene search

K
osvGoogleOSV:ALSA-2024:0310
HistoryJan 22, 2024 - 12:00 a.m.

Moderate: openssl security update

2024-01-2200:00:00
Google
osv.dev
7
openssl
security update
cipher key
iv length
cve-2023-5363
cvss score
acknowledgments
references
software

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.