Buffer Overflow

🗓️ 01 Nov 2022 17:29:15Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 55 Views

OpenSSL vulnerability to buffer overflow in X.509 certificate name constraint checking

Reporter	Title	Published	Views	Family All 209
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: API Connect is impacted by a vulnerability in OpenSSL (CVE-2022-3602, CVE-2022-3786)	8 Dec 202220:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera faspio Gateway affected by OpenSSL vulnerabilities (CVE-2022-3602, CVE-2022-3786)	2 Feb 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Privilege On-Premise is affected by multiple security vulnerabilities	5 Oct 202308:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM® Db2® Big SQL.	4 Jan 202512:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL may affect IBM Spectrum Protect Plus (CVE-2022-3602, CVE-2022-3786)	30 May 202317:46	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerabilities might impact IBM Cloud Application Business Insights - CVE-2022-3602 & CVE-2022-3786	30 Dec 202215:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) affected by OpenSSL vulnerabilities.	7 Mar 202309:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Local - Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	7 May 202419:21	–	ibm

Vulners

Node

openssl3 openssl3Range3.0.2-r0–3.0.5-r1os

AND

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.16

openssl opensslRange3.0.2-r0–3.0.5-r3os

AND

alpinelinux alpine_linuxMatch3.17

openssl opensslMatch3.0.0-r2os

AND

alpinelinux alpine_linuxMatch3.15

openssl3 openssl3Range3.0.0-r4–3.0.5-r0os

AND

alpinelinux alpine_linuxMatchedge

latest-stable latest-stableRange3.0.0-r4–3.0.5-r1os

AND

alpinelinux alpine_linuxMatchlatest-stable

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch3.0.0-r2os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch3.0.5-r2os

AND

openssl opensslMatch3.0.5-r3os

AND

openssl opensslMatch1.1.1m-r2os

AND

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch1.1.1g-r0os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1j-r0os

AND

openssl opensslMatch1.1.1k-r0os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch1.1.1m-r1os

AND

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1k-r1os

AND

openssl opensslMatch3.0.0-r0os

AND

openssl opensslMatch3.0.5-r1os

AND

openssl opensslMatch1.1.1l-r5os

AND

openssl opensslMatch1.1.1f-r0os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch1.1.1m-r3os

AND

alpinelinux alpine_linuxMatchedge

nodejs nodejsMatch16.16.0-r0os

AND

nodejs nodejsMatch12.16.2-r0os

AND

nodejs nodejsMatch14.16.0-r0os

AND

nodejs nodejsMatch16.17.0-r0os

AND

nodejs nodejsMatch14.16.0-r1os

AND

nodejs nodejsMatch16.18.0-r1os

AND

nodejs nodejsMatch14.17.1-r0os

AND

nodejs nodejsMatch16.15.0-r0os

AND

nodejs nodejsMatch16.13.1-r0os

AND

nodejs nodejsMatch16.14.2-r1os

AND

nodejs nodejsMatch12.15.0-r1os

AND

nodejs nodejsMatch14.17.3-r0os

AND

nodejs nodejsMatch14.17.2-r0os

AND

nodejs nodejsMatch14.17.0-r0os

AND

nodejs nodejsMatch16.13.1-r1os

AND

nodejs nodejsMatch16.16.0-r1os

AND

nodejs nodejsMatch14.18.0-r0os

AND

nodejs nodejsMatch16.15.0-r1os

AND

nodejs nodejsMatch14.17.6-r0os

AND

nodejs nodejsMatch16.13.2-r0os

AND

nodejs nodejsMatch16.14.2-r0os

AND

nodejs nodejsMatch16.13.2-r1os

AND

nodejs nodejsMatch14.18.1-r1os

AND

nodejs nodejsMatch14.17.6-r1os

AND

nodejs nodejsMatch14.17.4-r0os

AND

nodejs nodejsMatch16.17.1-r0os

AND

nodejs nodejsMatch14.17.5-r0os

AND

nodejs nodejsMatch14.16.1-r2os

AND

nodejs nodejsMatch12.17.0-r0os

AND

alpinelinux alpine_linuxMatchedge

openssl opensslMatch1.1.1h-1debian

AND

debian debian_linuxMatch999

nodejs nodejsMatch16.18.0-r1os

AND

alpinelinux alpine_linuxMatch3.17

devel develMatch1.1.1f-1ubuntu3debian

AND

devel develMatch1.1.1f-1ubuntu4debian

AND

devel develMatch1.1.1j-1ubuntu1debian

AND

debian debian_linux

openssl3 openssl3Match3.0.0-r3os

AND

openssl3 openssl3Match3.0.5-r1os

AND

openssl3 openssl3Match3.0.3-r0os

AND

openssl3 openssl3Match3.0.0-r4os

AND

openssl3 openssl3Match3.0.5-r0os

AND

openssl3 openssl3Match3.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.15

openssl3 openssl3Range3.0.0__3.el8.1–3.0.1__41.el8.1

openssl3-devel openssl3-develRange3.0.0__3.el8.1–3.0.1__41.el8.1

cryptography.io cryptographyRange37.0.0–38.0.2os

Source	Link
github	www.github.com/openssl/openssl/commit/fe3b639dc19b325846f4f6801f2f4604f56e3de3
openssl	www.openssl.org/news/secadv/20221101.txt
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-W9sdCc2a
github	www.github.com/pblumo/openssl-vuln-nov-2022/blob/main/list.csv
mta	www.mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html
openssl	www.openssl.org/blog/blog/2022/11/01/email-address-overflows/
akamai	www.akamai.com/blog/security-research/openssl-vulnerability-how-to-effectively-prepare
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/DWP23EZYOBDJQP7HP4YU7W2ABU2YDITS/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/63YRPWPUSX3MBHNPIEJZDKQT6YA7UF6S/
mta	www.mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html

09 Aug 2023 14:46Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.5

EPSS0.89804