Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-0464

Fixed in a distro release EPSS 4%CVSS 7.5

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Published 2023-03-22 · CVE record · OSV

Products: OpenSSL, Siemens BFCClient, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux 9openssl1:3.0.7-16.el9_2
AlmaLinux 9openssl-devel1:3.0.7-16.el9_2
AlmaLinux 9openssl-libs1:3.0.7-16.el9_2
AlmaLinux 9openssl-perl1:3.0.7-16.el9_2
Alpine 3.14openssl1.1.1t-r1
Alpine 3.15openssl1.1.1t-r2
Alpine 3.15openssl33.0.8-r1
Alpine 3.16openssl1.1.1t-r1
Alpine 3.16openssl33.0.8-r1
Alpine 3.17openssl3.0.8-r1
Alpine 3.18openssl3.1.0-r1
Alpine 3.19openssl3.1.0-r1
Alpine 3.20openssl3.1.0-r1
Alpine 3.21openssl3.1.0-r1
Alpine 3.22openssl3.1.0-r1
Alpine 3.23openssl3.1.0-r1
Alpine 3.24openssl3.1.0-r1
Chainguardlibcrypto33.1.0-r1
Chainguardlibssl33.1.0-r1
Chainguardopenssl3.1.0-r1
Chainguardopenssl-config3.1.0-r1
Chainguardopenssl-dbg3.1.0-r1
Chainguardopenssl-dev3.1.0-r1
Chainguardopenssl-doc3.1.0-r1
Chainguardopenssl-engine-afalg3.1.0-r1
Chainguardopenssl-engine-capi3.1.0-r1
Chainguardopenssl-engine-loader-attic3.1.0-r1
Chainguardopenssl-engine-padlock3.1.0-r1
Chainguardopenssl-provider-fips3.0.9-r1
Chainguardopenssl-provider-legacy3.1.0-r1
Chainguardruby-3.00
Chainguardruby-3.0-dev0
Chainguardruby-3.0-doc0
Chainguardruby-3.10
Chainguardruby-3.1-base0
Chainguardruby-3.1-base-dev0
Chainguardruby-3.1-dev0
Chainguardruby-3.1-doc0
Chainguardruby-3.20
Chainguardruby-3.2-base0
Chainguardruby-3.2-base-dev0
Chainguardruby-3.2-dev0
Chainguardruby-3.2-doc0
Debian 10openssl1.1.1n-0+deb10u5
Debian 11openssl1.1.1n-0+deb11u5
Debian 12openssl3.0.9-1
Debian 13openssl3.0.9-1
Debian 14openssl3.0.9-1
Red Hat Enterprise Linux 9openssl1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-debuginfo1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-debugsource1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-devel1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-libs1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-libs-debuginfo1:3.0.7-16.el9_2
Red Hat Enterprise Linux 9openssl-perl1:3.0.7-16.el9_2
Red Hat jboss core services 1jbcs-httpd24-curl0:8.4.0-2.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-curl0:8.4.0-2.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-curl-debuginfo0:8.4.0-2.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-curl-debuginfo0:8.4.0-2.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-libcurl0:8.4.0-2.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-libcurl0:8.4.0-2.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-libcurl-debuginfo0:8.4.0-2.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-libcurl-devel0:8.4.0-2.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-libcurl-devel0:8.4.0-2.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_http20:1.15.19-32.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_http20:1.15.19-32.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-32.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-32.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk0:1.2.49-1.redhat_1.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk0:1.2.49-1.redhat_1.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk-ap240:1.2.49-1.redhat_1.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk-ap240:1.2.49-1.redhat_1.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk-ap24-debuginfo0:1.2.49-1.redhat_1.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-mod_jk-debuginfo0:1.2.49-1.redhat_1.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-debuginfo1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-debuginfo1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-devel1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-devel1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-libs1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-libs1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-libs-debuginfo1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-perl1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-perl1:1.1.1k-16.el8jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-static1:1.1.1k-16.el7jbcs
Red Hat jboss core services 1jbcs-httpd24-openssl-static1:1.1.1k-16.el8jbcs
Red Hat jboss enterprise web server 5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-java-jdk110:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-java-jdk80:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el9jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el7jws
Red Hat jboss enterprise web server 5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el8jws
SUSE Enterprise Storage 7openssl-1_0_01.0.2p-150000.3.70.1
SUSE Enterprise Storage 7openssl-1_11.1.1d-150200.11.62.1
SUSE Enterprise Storage 7.1openssl-1_0_01.0.2p-150000.3.70.1
SUSE Enterprise Storage 7.1openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSopenssl-1_11.1.0i-150100.14.45.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSopenssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSopenssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Micro 5.1openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Micro 5.2openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Micro 5.3openssl-1_11.1.1l-150400.7.31.2
SUSE Linux Enterprise Micro 5.4openssl-1_11.1.1l-150400.7.31.2
SUSE Linux Enterprise Module for Basesystem 15 SP4openssl-1_11.1.1l-150400.7.31.2
SUSE Linux Enterprise Module for Basesystem 15 SP4openssl-33.0.1-150400.4.20.1
SUSE Linux Enterprise Module for Legacy 12compat-openssl0980.9.8j-106.45.1
SUSE Linux Enterprise Module for Legacy 15 SP4openssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Real Time 15 SP3openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREopenssl0.9.8j-0.106.63.1
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME COREopenssl11.0.1g-0.58.59.1
SUSE Linux Enterprise Server 12 SP2-BCLopenssl1.0.2j-60.89.1
SUSE Linux Enterprise Server 12 SP4-ESPOSopenssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Server 12 SP4-ESPOSopenssl-1_11.1.1d-2.78.1
SUSE Linux Enterprise Server 12 SP4-LTSSopenssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Server 12 SP4-LTSSopenssl-1_11.1.1d-2.78.1
SUSE Linux Enterprise Server 12 SP5openssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Server 12 SP5openssl-1_11.1.1d-2.78.1
SUSE Linux Enterprise Server 15 SP1-LTSSopenssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server 15 SP1-LTSSopenssl-1_11.1.0i-150100.14.45.1
SUSE Linux Enterprise Server 15 SP2-LTSSopenssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server 15 SP2-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4compat-openssl0980.9.8j-106.45.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4openssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4openssl-1_11.1.1d-2.78.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5compat-openssl0980.9.8j-106.45.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5openssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5openssl-1_11.1.1d-2.78.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1openssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1openssl-1_11.1.0i-150100.14.45.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2openssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openssl-1_0_01.0.2p-150000.3.70.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openssl-1_11.1.1d-150200.11.62.1
SUSE Linux Enterprise Software Development Kit 12 SP5openssl-1_0_01.0.2p-3.69.1
SUSE Linux Enterprise Software Development Kit 12 SP5openssl-1_11.1.1d-2.78.1
SUSE Manager Proxy 4.2openssl-1_11.1.1d-150200.11.62.1
SUSE Manager Server 4.2openssl-1_11.1.1d-150200.11.62.1
SUSE OpenStack Cloud 9openssl-1_0_01.0.2p-3.69.1
SUSE OpenStack Cloud 9openssl-1_11.1.1d-2.78.1
SUSE OpenStack Cloud Crowbar 9openssl-1_0_01.0.2p-3.69.1
SUSE OpenStack Cloud Crowbar 9openssl-1_11.1.1d-2.78.1
Ubuntu 18.04 LTSopenssl1.1.1-1ubuntu2.1~18.04.22
Ubuntu 18.04 LTSopenssl1.01.0.2n-1ubuntu5.12
Ubuntu 20.04 LTSopenssl1.1.1f-1ubuntu2.18
Ubuntu 22.04 LTSedk22022.02-3ubuntu0.22.04.4
Ubuntu 22.04 LTSopenssl3.0.2-0ubuntu1.9
Ubuntu 24.04 LTSedk22024.02-2ubuntu0.6
Ubuntu Pro 14.04 LTSopenssl1.0.1f-1ubuntu2.27+esm7
Ubuntu Pro 16.04 LTSedk2no fix
Ubuntu Pro 16.04 LTSopenssl1.0.2g-1ubuntu4.20+esm7
Ubuntu Pro 18.04 LTSedk2no fix
Ubuntu Pro 20.04 LTSedk2no fix
Ubuntu Pro 22.04 LTSnodejsno fix
Ubuntu Pro FIPS-updates 16.04 LTSopenssl1.0.2g-1ubuntu4.fips.4.20.7
Ubuntu Pro FIPS-updates 18.04 LTSopenssl1.1.1-1ubuntu2.fips.2.1~18.04.22
Ubuntu Pro FIPS-updates 20.04 LTSopenssl1.1.1f-1ubuntu2.fips.18
Ubuntu Pro FIPS 16.04 LTSopensslno fix
Ubuntu Pro FIPS 18.04 LTSopensslno fix
Ubuntu Pro FIPS 20.04 LTSopensslno fix
Wolfilibcrypto33.1.0-r1
Wolfilibssl33.1.0-r1
Wolfiopenssl3.1.0-r1
Wolfiopenssl-config3.1.0-r1
Wolfiopenssl-dbg3.1.0-r1
Wolfiopenssl-dev3.1.0-r1
Wolfiopenssl-doc3.1.0-r1
Wolfiopenssl-engine-afalg3.1.0-r1
Wolfiopenssl-engine-capi3.1.0-r1
Wolfiopenssl-engine-loader-attic3.1.0-r1
Wolfiopenssl-engine-padlock3.1.0-r1
Wolfiopenssl-provider-legacy3.1.0-r1
Wolfiruby-3.00
Wolfiruby-3.0-dev0
Wolfiruby-3.0-doc0
Wolfiruby-3.10
Wolfiruby-3.1-base0
Wolfiruby-3.1-base-dev0
Wolfiruby-3.1-dev0
Wolfiruby-3.1-doc0
Wolfiruby-3.20
Wolfiruby-3.2-base0
Wolfiruby-3.2-base-dev0
Wolfiruby-3.2-dev0
Wolfiruby-3.2-doc0
openSUSE Leap 15.4openssl-1_0_01.0.2p-150000.3.70.1
openSUSE Leap 15.4openssl-1_11.1.1l-150400.7.31.2
openSUSE Leap 15.4openssl-33.0.1-150400.4.20.1
openSUSE Leap Micro 5.3openssl-1_11.1.1l-150400.7.31.2
openSUSE Tumbleweedopenssl-1_0_01.0.2u-14.1
openSUSE Tumbleweedopenssl-1_11.1.1t-2.1
openSUSE Tumbleweedopenssl-33.1.1-1.1
openSUSE Tumbleweedpython-pymssql2.3.12-1.1