TI-2023-02479 CVE-2023-2650 · GHSA-gqxg-9vfr-p9cg
Possible DoS translating ASN.1 object identifiers
Priority HIGH 68
Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.
RHSA-2023:3722
openssl security and bug fix update
Released 2023-06-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.0.7-16.el9_2, openssl-perl-1:3.0.7-16.el9_2
- Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.0.7-16.el9_2, openssl-libs-1:3.0.7-16.el9_2
Fixes 5 records
TI-2023-00439 CVE-2023-0464 · GHSA-w2w6-xp88-5cvw
Excessive Resource Usage Verifying X.509 Policy Constraints
Priority MEDIUM 46
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.
TI-2023-00440 CVE-2023-0465 · GHSA-77f3-6546-6rj7
Invalid certificate policies in leaf certificates are silently ignored
Priority LOW 34
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.
TI-2023-01188 CVE-2023-1255 · GHSA-4wp2-xw7p-2gfx
Input buffer over-read in AES-XTS implementation on 64 bit ARM
Priority LOW 28
Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash.
TI-2023-00441 CVE-2023-0466 · GHSA-pxvj-4wx4-gv6w
Certificate policy check not enabled
Priority LOW 28
The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.