openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

🗓️ 30 Apr 2024 10:36:25Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 5 Views

A flaw in openssl library slows Diffie-Hellman keys and parameters, risking denial of service.

Reporter	Title	Published	Views	Family All 402
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-yaml, OpenSSL, GnuTLS , OpenTelemetry-Go, go-toolset and urllib3	30 Jan 202408:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM DevOps Code ClearCase	15 Jul 202413:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Open Source affect Cloud Pak System	28 Oct 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational® Application Developer for WebSphere® Software is vulnerable to a denial of service	13 May 202423:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Base OS issues	15 Apr 202503:20	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service vulnerabilities in Node.js affects IBM Rational Developer for i RPG and COBOL + Modernization Tools, Java Edition	30 May 202418:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH and OpenSSL affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	15 Apr 202503:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	15 Apr 202502:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2023-5678]	14 Nov 202409:21	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	aarch64	openssl	1:3.0.7-27.el9	openssl-1:3.0.7-27.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	openssl	1:3.0.7-27.el9	openssl-1:3.0.7-27.el9.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	openssl	1:3.0.7-27.el9	openssl-1:3.0.7-27.el9.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	openssl	1:3.0.7-27.el9	openssl-1:3.0.7-27.el9.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	openssl-debuginfo	1:3.0.7-27.el9	openssl-debuginfo-1:3.0.7-27.el9.aarch64.rpm
Red Hat Enterprise Linux	9	i686	openssl-debuginfo	1:3.0.7-27.el9	openssl-debuginfo-1:3.0.7-27.el9.i686.rpm
Red Hat Enterprise Linux	9	ppc64le	openssl-debuginfo	1:3.0.7-27.el9	openssl-debuginfo-1:3.0.7-27.el9.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	openssl-debuginfo	1:3.0.7-27.el9	openssl-debuginfo-1:3.0.7-27.el9.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	openssl-debuginfo	1:3.0.7-27.el9	openssl-debuginfo-1:3.0.7-27.el9.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	openssl-debugsource	1:3.0.7-27.el9	openssl-debugsource-1:3.0.7-27.el9.aarch64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-5678
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-5678
cve	www.cve.org/CVERecord
openssl	www.openssl.org/news/secadv/20231106.txt

15 Jul 2026 04:55Current

7High risk

Vulners AI Score7

CVSS 3.15.3

EPSS0.04459

SSVC

openssl library diffie hellman keys long keys parameters slow denial of service unix environment