OpenSSL vulnerability

2024-09-0300:00:00

ubuntu.com

openssl

x.509 certificate

ubuntu 24.04 lts

ubuntu 22.04 lts

denial of service

sensitive information

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.4

Confidence

Low

JSON

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS

Packages

openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

David Benjamin discovered that OpenSSL incorrectly handled certain
X.509 certificates. An attacker could possible use this issue to
cause a denial of service or expose sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchlibssl3t64< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu24.04noarchlibssl-dev< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu24.04noarchlibssl-doc< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu24.04noarchlibssl3t64-dbgsym< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu24.04noarchopenssl< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu24.04noarchopenssl-dbgsym< 3.0.13-0ubuntu3.4UNKNOWN
Ubuntu22.04noarchlibssl3< 3.0.2-0ubuntu1.18UNKNOWN
Ubuntu22.04noarchlibssl-dev< 3.0.2-0ubuntu1.18UNKNOWN
Ubuntu22.04noarchlibssl-doc< 3.0.2-0ubuntu1.18UNKNOWN
Ubuntu22.04noarchlibssl3-dbgsym< 3.0.2-0ubuntu1.18UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	24.04	noarch	libssl3t64	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	24.04	noarch	libssl-dev	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	24.04	noarch	libssl-doc	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	24.04	noarch	libssl3t64-dbgsym	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	24.04	noarch	openssl	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	24.04	noarch	openssl-dbgsym	< 3.0.13-0ubuntu3.4	UNKNOWN
Ubuntu	22.04	noarch	libssl3	< 3.0.2-0ubuntu1.18	UNKNOWN
Ubuntu	22.04	noarch	libssl-dev	< 3.0.2-0ubuntu1.18	UNKNOWN
Ubuntu	22.04	noarch	libssl-doc	< 3.0.2-0ubuntu1.18	UNKNOWN
Ubuntu	22.04	noarch	libssl3-dbgsym	< 3.0.2-0ubuntu1.18	UNKNOWN