Lucene search

K
osvGoogleOSV:USN-6622-1
HistoryFeb 05, 2024 - 12:18 p.m.

openssl vulnerabilities

2024-02-0512:18:56
Google
osv.dev
6
openssl
vulnerabilities
dh keys
poly1304 mac
powerpc
rsa
pkcs12
denial of service
arbitrary code execution
ubuntu 22.04 lts
ubuntu 23.04

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.9%

David Benjamin discovered that OpenSSL incorrectly handled excessively long
X9.42 DH keys. A remote attacker could possibly use this issue to cause
OpenSSL to consume resources, leading to a denial of service.
(CVE-2023-5678)

Sverker Eriksson discovered that OpenSSL incorrectly handled POLY1304 MAC
on the PowerPC architecture. A remote attacker could use this issue to
cause OpenSSL to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and
Ubuntu 23.04. (CVE-2023-6129)

It was discovered that OpenSSL incorrectly handled excessively long RSA
public keys. A remote attacker could possibly use this issue to cause
OpenSSL to consume resources, leading to a denial of service. This issue
only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-6237)

Bahaa Naamneh discovered that OpenSSL incorrectly handled certain malformed
PKCS12 files. A remote attacker could possibly use this issue to cause
OpenSSL to crash, resulting in a denial of service. (CVE-2024-0727)