Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-0465

Fixed in a distro release EPSS 2%CVSS 5.3

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Published 2023-03-28 · CVE record · OSV

Products: OpenSSL, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux:9openssl1:3.0.7-16.el9_2
AlmaLinux:9openssl-devel1:3.0.7-16.el9_2
AlmaLinux:9openssl-libs1:3.0.7-16.el9_2
AlmaLinux:9openssl-perl1:3.0.7-16.el9_2
Alpine:v3.14openssl1.1.1t-r2
Alpine:v3.15openssl1.1.1t-r2
Alpine:v3.15openssl33.0.8-r2
Alpine:v3.16openssl1.1.1t-r2
Alpine:v3.16openssl33.0.8-r2
Alpine:v3.17openssl3.0.8-r2
Alpine:v3.18openssl3.1.0-r2
Alpine:v3.19openssl3.1.0-r2
Alpine:v3.20openssl3.1.0-r2
Alpine:v3.21openssl3.1.0-r2
Alpine:v3.22openssl3.1.0-r2
Alpine:v3.23openssl3.1.0-r2
Alpine:v3.24openssl3.1.0-r2
Chainguardlibcrypto33.1.0-r2
Chainguardlibssl33.1.0-r2
Chainguardopenssl3.1.0-r2
Chainguardopenssl-config3.1.0-r2
Chainguardopenssl-dbg3.1.0-r2
Chainguardopenssl-dev3.1.0-r2
Chainguardopenssl-doc3.1.0-r2
Chainguardopenssl-engine-afalg3.1.0-r2
Chainguardopenssl-engine-capi3.1.0-r2
Chainguardopenssl-engine-loader-attic3.1.0-r2
Chainguardopenssl-engine-padlock3.1.0-r2
Chainguardopenssl-provider-fips3.0.9-r1
Chainguardopenssl-provider-legacy3.1.0-r2
Chainguardruby-3.00
Chainguardruby-3.0-dev0
Chainguardruby-3.0-doc0
Chainguardruby-3.10
Chainguardruby-3.1-base0
Chainguardruby-3.1-base-dev0
Chainguardruby-3.1-dev0
Chainguardruby-3.1-doc0
Chainguardruby-3.20
Chainguardruby-3.2-base0
Chainguardruby-3.2-base-dev0
Chainguardruby-3.2-dev0
Chainguardruby-3.2-doc0
Debian:10openssl1.1.1n-0+deb10u5
Debian:11openssl1.1.1n-0+deb11u5
Debian:12openssl3.0.9-1
Debian:13openssl3.0.9-1
Debian:14openssl3.0.9-1
Red Hat:enterprise_linux:9openssl1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-debuginfo1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-debugsource1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-devel1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-libs1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-libs-debuginfo1:3.0.7-16.el9_2
Red Hat:enterprise_linux:9openssl-perl1:3.0.7-16.el9_2
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:8.4.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:8.4.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:8.4.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:8.4.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:8.4.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:8.4.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-debuginfo0:8.4.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:8.4.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:8.4.0-2.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.19-32.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.19-32.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-32.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.19-32.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.49-1.redhat_1.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.49-1.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.49-1.redhat_1.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.49-1.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap24-debuginfo0:1.2.49-1.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-debuginfo0:1.2.49-1.redhat_1.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs-debuginfo1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1k-16.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1k-16.el7jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1k-16.el8jbcs
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-admin-webapps0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-docs-webapp0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-el-3.0-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-java-jdk110:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-java-jdk80:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-javadoc0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-jsp-2.3-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-lib0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native0:1.2.31-16.redhat_16.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-native-debuginfo0:1.2.31-16.redhat_16.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-selinux0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-servlet-4.0-api0:9.0.62-19.redhat_00017.1.el8jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el7jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el9jws
Red Hat:jboss_enterprise_web_server:5.7jws5-tomcat-webapps0:9.0.62-19.redhat_00017.1.el8jws
SUSE:Enterprise Storage 7openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Enterprise Storage 7openssl-1_11.1.1d-150200.11.62.1
SUSE:Enterprise Storage 7.1openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Enterprise Storage 7.1openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSopenssl-1_11.1.0i-150100.14.48.1
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSopenssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOSopenssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSopenssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Micro 5.1openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Micro 5.2openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Micro 5.3openssl-1_11.1.1l-150400.7.34.1
SUSE:Linux Enterprise Micro 5.4openssl-1_11.1.1l-150400.7.34.1
SUSE:Linux Enterprise Module for Basesystem 15 SP4openssl-1_11.1.1l-150400.7.34.1
SUSE:Linux Enterprise Module for Basesystem 15 SP4openssl-33.0.1-150400.4.23.1
SUSE:Linux Enterprise Module for Legacy 12compat-openssl0980.9.8j-106.48.1
SUSE:Linux Enterprise Module for Legacy 15 SP4openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Real Time 15 SP3openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME COREopenssl0.9.8j-0.106.66.1
SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME COREopenssl11.0.1g-0.58.62.1
SUSE:Linux Enterprise Server 12 SP2-BCLopenssl1.0.2j-60.92.1
SUSE:Linux Enterprise Server 12 SP4-ESPOSopenssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Server 12 SP4-ESPOSopenssl-1_11.1.1d-2.81.1
SUSE:Linux Enterprise Server 12 SP4-LTSSopenssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Server 12 SP4-LTSSopenssl-1_11.1.1d-2.81.1
SUSE:Linux Enterprise Server 12 SP5openssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Server 12 SP5openssl-1_11.1.1d-2.81.1
SUSE:Linux Enterprise Server 15 SP1-LTSSopenssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server 15 SP1-LTSSopenssl-1_11.1.0i-150100.14.48.1
SUSE:Linux Enterprise Server 15 SP2-LTSSopenssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server 15 SP2-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Server 15 SP3-LTSSopenssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server 15 SP3-LTSSopenssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4compat-openssl0980.9.8j-106.48.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4openssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4openssl-1_11.1.1d-2.81.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5compat-openssl0980.9.8j-106.48.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5openssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5openssl-1_11.1.1d-2.81.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1openssl-1_11.1.0i-150100.14.48.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3openssl-1_0_01.0.2p-150000.3.73.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3openssl-1_11.1.1d-150200.11.62.1
SUSE:Linux Enterprise Software Development Kit 12 SP5openssl-1_0_01.0.2p-3.72.1
SUSE:Linux Enterprise Software Development Kit 12 SP5openssl-1_11.1.1d-2.81.1
SUSE:Manager Proxy 4.2openssl-1_11.1.1d-150200.11.62.1
SUSE:Manager Server 4.2openssl-1_11.1.1d-150200.11.62.1
SUSE:OpenStack Cloud 9openssl-1_0_01.0.2p-3.72.1
SUSE:OpenStack Cloud 9openssl-1_11.1.1d-2.81.1
SUSE:OpenStack Cloud Crowbar 9openssl-1_0_01.0.2p-3.72.1
SUSE:OpenStack Cloud Crowbar 9openssl-1_11.1.1d-2.81.1
Ubuntu:18.04:LTSopenssl1.1.1-1ubuntu2.1~18.04.22
Ubuntu:18.04:LTSopenssl1.01.0.2n-1ubuntu5.12
Ubuntu:20.04:LTSopenssl1.1.1f-1ubuntu2.18
Ubuntu:22.04:LTSedk22022.02-3ubuntu0.22.04.4
Ubuntu:22.04:LTSopenssl3.0.2-0ubuntu1.9
Ubuntu:24.04:LTSedk22024.02-2ubuntu0.6
Ubuntu:Pro:14.04:LTSopenssl1.0.1f-1ubuntu2.27+esm7
Ubuntu:Pro:16.04:LTSedk2no fix
Ubuntu:Pro:16.04:LTSopenssl1.0.2g-1ubuntu4.20+esm7
Ubuntu:Pro:18.04:LTSedk2no fix
Ubuntu:Pro:20.04:LTSedk2no fix
Ubuntu:Pro:22.04:LTSnodejsno fix
Ubuntu:Pro:FIPS-updates:16.04:LTSopenssl1.0.2g-1ubuntu4.fips.4.20.7
Ubuntu:Pro:FIPS-updates:18.04:LTSopenssl1.1.1-1ubuntu2.fips.2.1~18.04.22
Ubuntu:Pro:FIPS-updates:20.04:LTSopenssl1.1.1f-1ubuntu2.fips.18
Ubuntu:Pro:FIPS:16.04:LTSopensslno fix
Ubuntu:Pro:FIPS:18.04:LTSopensslno fix
Ubuntu:Pro:FIPS:20.04:LTSopensslno fix
Wolfilibcrypto33.1.0-r2
Wolfilibssl33.1.0-r2
Wolfiopenssl3.1.0-r2
Wolfiopenssl-config3.1.0-r2
Wolfiopenssl-dbg3.1.0-r2
Wolfiopenssl-dev3.1.0-r2
Wolfiopenssl-doc3.1.0-r2
Wolfiopenssl-engine-afalg3.1.0-r2
Wolfiopenssl-engine-capi3.1.0-r2
Wolfiopenssl-engine-loader-attic3.1.0-r2
Wolfiopenssl-engine-padlock3.1.0-r2
Wolfiopenssl-provider-legacy3.1.0-r2
Wolfiruby-3.00
Wolfiruby-3.0-dev0
Wolfiruby-3.0-doc0
Wolfiruby-3.10
Wolfiruby-3.1-base0
Wolfiruby-3.1-base-dev0
Wolfiruby-3.1-dev0
Wolfiruby-3.1-doc0
Wolfiruby-3.20
Wolfiruby-3.2-base0
Wolfiruby-3.2-base-dev0
Wolfiruby-3.2-dev0
Wolfiruby-3.2-doc0
openSUSE:Leap 15.4openssl-1_0_01.0.2p-150000.3.73.1
openSUSE:Leap 15.4openssl-1_11.1.1l-150400.7.34.1
openSUSE:Leap 15.4openssl-33.0.1-150400.4.23.1
openSUSE:Leap Micro 5.3openssl-1_11.1.1l-150400.7.34.1
openSUSE:Tumbleweedopenssl-1_0_01.0.2u-15.1
openSUSE:Tumbleweedopenssl-1_11.1.1t-3.1
openSUSE:Tumbleweedopenssl-33.1.1-1.1