CVE-2023-0216
Fixed in a distro release EPSS 2%CVSS 7.5
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
Products: OpenSSL
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| crates.io | openssl-src | 300.0.12 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | openssl | 1:3.0.1-47.el9_1 |
| AlmaLinux 9 | openssl-devel | 1:3.0.1-47.el9_1 |
| AlmaLinux 9 | openssl-libs | 1:3.0.1-47.el9_1 |
| AlmaLinux 9 | openssl-perl | 1:3.0.1-47.el9_1 |
| Alpine 3.15 | openssl3 | 3.0.8-r0 |
| Alpine 3.16 | openssl3 | 3.0.8-r0 |
| Alpine 3.17 | openssl | 3.0.8-r0 |
| Alpine 3.18 | openssl | 3.0.8-r0 |
| Alpine 3.19 | openssl | 3.0.8-r0 |
| Alpine 3.20 | openssl | 3.0.8-r0 |
| Alpine 3.21 | openssl | 3.0.8-r0 |
| Alpine 3.22 | openssl | 3.0.8-r0 |
| Alpine 3.23 | openssl | 3.0.8-r0 |
| Alpine 3.24 | openssl | 3.0.8-r0 |
| Chainguard | libcrypto3 | 3.1.0-r0 |
| Chainguard | libssl3 | 3.1.0-r0 |
| Chainguard | openssl | 3.1.0-r0 |
| Chainguard | openssl-config | 3.1.0-r0 |
| Chainguard | openssl-dbg | 3.1.0-r0 |
| Chainguard | openssl-dev | 3.1.0-r0 |
| Chainguard | openssl-doc | 3.1.0-r0 |
| Chainguard | openssl-engine-afalg | 3.1.0-r0 |
| Chainguard | openssl-engine-capi | 3.1.0-r0 |
| Chainguard | openssl-engine-loader-attic | 3.1.0-r0 |
| Chainguard | openssl-engine-padlock | 3.1.0-r0 |
| Chainguard | openssl-provider-fips | 3.0.8-r0 |
| Chainguard | openssl-provider-legacy | 3.1.0-r0 |
| Chainguard | ruby-3.1 | 0 |
| Chainguard | ruby-3.1-base | 0 |
| Chainguard | ruby-3.1-base-dev | 0 |
| Chainguard | ruby-3.1-dev | 0 |
| Chainguard | ruby-3.1-doc | 0 |
| Debian 12 | openssl | 3.0.8-1 |
| Debian 13 | openssl | 3.0.8-1 |
| Debian 14 | openssl | 3.0.8-1 |
| Red Hat Enterprise Linux 9 | openssl | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-debuginfo | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-debugsource | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-devel | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-libs | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-libs-debuginfo | 1:3.0.1-47.el9_1 |
| Red Hat Enterprise Linux 9 | openssl-perl | 1:3.0.1-47.el9_1 |
| Red Hat rhel eus 9.0 | openssl | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-debuginfo | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-debugsource | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-devel | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-libs | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-libs-debuginfo | 1:3.0.1-46.el9_0 |
| Red Hat rhel eus 9.0 | openssl-perl | 1:3.0.1-46.el9_0 |
| Rocky Linux 9 | openssl | 1:3.0.1-47.el9_1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | openssl-3 | 3.0.1-150400.4.17.1 |
| Ubuntu 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.21 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.17 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.8 |
| Wolfi | libcrypto3 | 3.1.0-r0 |
| Wolfi | libssl3 | 3.1.0-r0 |
| Wolfi | openssl | 3.1.0-r0 |
| Wolfi | openssl-config | 3.1.0-r0 |
| Wolfi | openssl-dbg | 3.1.0-r0 |
| Wolfi | openssl-dev | 3.1.0-r0 |
| Wolfi | openssl-doc | 3.1.0-r0 |
| Wolfi | openssl-engine-afalg | 3.1.0-r0 |
| Wolfi | openssl-engine-capi | 3.1.0-r0 |
| Wolfi | openssl-engine-loader-attic | 3.1.0-r0 |
| Wolfi | openssl-engine-padlock | 3.1.0-r0 |
| Wolfi | openssl-provider-legacy | 3.1.0-r0 |
| Wolfi | ruby-3.1 | 0 |
| Wolfi | ruby-3.1-base | 0 |
| Wolfi | ruby-3.1-base-dev | 0 |
| Wolfi | ruby-3.1-dev | 0 |
| Wolfi | ruby-3.1-doc | 0 |
| openSUSE Leap 15.4 | openssl-3 | 3.0.1-150400.4.17.1 |
| openSUSE Tumbleweed | openssl-3 | 3.0.8-1.1 |