Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6450-1
HistoryOct 24, 2023 - 12:00 a.m.

OpenSSL vulnerabilities

2023-10-2400:00:00
ubuntu.com
20

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.6%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS

Packages

  • openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

Tony Battersby discovered that OpenSSL incorrectly handled key and
initialization vector (IV) lengths. This could lead to truncation issues
and result in loss of confidentiality for some symmetric cipher modes.
(CVE-2023-5363)

Juerg Wullschleger discovered that OpenSSL incorrectly handled the AES-SIV
cipher. This could lead to empty data entries being ignored, resulting in
certain applications being misled. This issue only affected Ubuntu 22.04
LTS and Ubuntu 23.04. (CVE-2023-2975)

It was discovered that OpenSSL incorrectly handled checking excessively
long DH keys or parameters. A remote attacker could possibly use this issue
to cause OpenSSL to consume resources, leading to a denial of service. This
issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-3446,
CVE-2023-3817)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibssl3< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchlibssl-dev< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchlibssl-doc< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchlibssl3-dbgsym< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchopenssl< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.10noarchopenssl-dbgsym< 3.0.10-1ubuntu2.1UNKNOWN
Ubuntu23.04noarchlibssl3< 3.0.8-1ubuntu1.4UNKNOWN
Ubuntu23.04noarchlibssl-dev< 3.0.8-1ubuntu1.4UNKNOWN
Ubuntu23.04noarchlibssl-doc< 3.0.8-1ubuntu1.4UNKNOWN
Ubuntu23.04noarchlibssl3-dbgsym< 3.0.8-1ubuntu1.4UNKNOWN
Rows per page:
1-10 of 181

Related

nessus 85
cloudfoundry 1
openvas 50
osv 10
mageia 4
prion 2
ubuntucve 2
ibm 4
debiancve 2
broadcom 1
redos 2
f5 2
amazon 4
ubuntu 3
debian 2
slackware 1
alpinelinux 2
cve 2
oraclelinux 5
redhat 5
almalinux 3
aix 1
freebsd 1
openssl 1
cgr 1
ics 1
redhatcve 1
veracode 1
nessus
nessus
Ubuntu 22.04 LTS / 23.04 / 23.10 : OpenSSL vulnerabilities (USN-6450-1)
2023-10-24 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2023:4189-1)
2023-10-26 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2023:4190-1)
2023-10-26 00:00:00
cloudfoundry
cloudfoundry
USN-6450-1: OpenSSL vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6450-1)
2023-10-25 00:00:00
Mageia: Security Advisory (MGASA-2023-0273)
2023-10-02 00:00:00
Mageia: Security Advisory (MGASA-2023-0253)
2023-09-11 00:00:00
osv
osv
openssl vulnerabilities
2023-10-24 16:14:24
CVE-2023-3817
2023-07-31 16:15:10
openssl vulnerabilities
2023-10-18 19:51:24
mageia
mageia
Updated openssl packages fix security vulnerability
2023-09-11 16:07:54
Updated quictls packages fix security vulnerabilities
2023-09-30 22:15:40
Updated quictls packages fix a security vulnerability
2023-11-12 03:44:53
prion
prion
Design/Logic Flaw
2023-07-31 16:15:00
Design/Logic Flaw
2023-10-25 18:17:00
ubuntucve
ubuntucve
CVE-2023-3817
2023-07-31 00:00:00
CVE-2023-5363
2023-10-24 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase
2024-03-13 14:30:55
Security Bulletin: Due to the use of OpenSSL, IBM CICS TX Advanced is vulnerable to a denial of service (DOS) (CVE-2023-3817 and CVE-2023-3446).
2024-02-13 17:00:03
Security Bulletin: Multiple vulnerabilities in OpenSSL affects IBM Rational ClearCase
2024-03-13 14:31:16
debiancve
debiancve
CVE-2023-3817
2023-07-31 16:15:10
CVE-2023-5363
2023-10-25 18:17:43
broadcom
broadcom
Excessive time spent checking DH q parameter value (CVE-2023-3817)
2024-04-16 00:00:00
redos
redos
ROS-20230907-04
2023-09-07 00:00:00
ROS-20231110-02
2023-11-10 00:00:00
f5
f5
K000137969 : OpenSSL vulnerability CVE-2023-3817
2023-12-19 00:00:00
K000138177 : OpenSSL vulnerability CVE-2023-5363
2024-01-10 00:00:00
amazon
amazon
Medium: openssl
2023-09-27 22:15:00
Medium: openssl11
2023-08-31 22:28:00
Medium: edk2
2023-08-17 11:58:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-10-25 00:00:00
OpenSSL vulnerabilities
2023-10-18 00:00:00
OpenSSL vulnerabilities
2024-03-21 00:00:00
debian
debian
[SECURITY] [DLA 3530-1] openssl security update
2023-08-16 05:56:58
[SECURITY] [DSA 5532-1] openssl security update
2023-10-24 19:19:01
slackware
slackware
[slackware-security] openssl
2023-08-02 17:08:29
alpinelinux
alpinelinux
CVE-2023-3817
2023-07-31 16:15:10
CVE-2023-5363
2023-10-25 18:17:43
cve
cve
CVE-2023-3817
2023-07-31 16:15:10
CVE-2023-5363
2023-10-25 18:17:43
oraclelinux
oraclelinux
openssl security update
2024-01-10 00:00:00
openssl security update
2023-12-18 00:00:00
openssl and openssl-fips-provider security update
2024-05-03 00:00:00
redhat
redhat
(RHSA-2023:7877) Low: openssl security update
2023-12-18 07:10:45
(RHSA-2024:0154) Low: openssl security update
2024-01-10 16:25:10
(RHSA-2024:0208) Low: openssl security update
2024-01-11 21:04:17
almalinux
almalinux
Low: openssl security update
2023-12-19 00:00:00
Low: openssl and openssl-fips-provider security update
2024-04-30 00:00:00
Moderate: openssl security update
2024-01-22 00:00:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-09-11 10:43:54
freebsd
freebsd
OpenSSL -- potential loss of confidentiality
2023-10-24 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2023-5363
2023-10-24 00:00:00
cgr
cgr
CVE-2023-5363 vulnerabilities
2024-05-09 03:06:40
ics
ics
Siemens SIMATIC MV500
2023-11-16 12:00:00
redhatcve
redhatcve
CVE-2023-5363
2023-10-25 11:57:11
veracode
veracode
Information Disclosure
2023-10-28 00:48:09

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.6%

JSON
Related for USN-6450-1
nessus85cloudfoundry1openvas50osv10mageia4prion2ubuntucve2ibm4debiancve2broadcom1redos2f52amazon4ubuntu3debian2slackware1alpinelinux2cve2oraclelinux5redhat5almalinux3aix1freebsd1openssl1cgr1ics1redhatcve1veracode1