Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3397-1

Опубликовано: 23 авг. 2023
Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

  • CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
  • Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot handle zero size. (bsc#1213517)

Список пакетов

Container bci/bci-init:15.4
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container bci/node:16
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container bci/python:3
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container rancher/elemental-operator:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container rancher/elemental-teal-iso/5.4:latest
libopenssl1_1-1.1.1l-150400.7.53.1
Container rancher/elemental-teal-rt/5.4:latest
libopenssl1_1-1.1.1l-150400.7.53.1
Container rancher/elemental-teal/5.4:latest
libopenssl1_1-1.1.1l-150400.7.53.1
Container rancher/seedimage-builder:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/ltss/sle15.4/bci-base:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/manager/4.3/proxy-httpd:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container suse/manager/4.3/proxy-salt-broker:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/manager/4.3/proxy-squid:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container suse/manager/4.3/proxy-ssh:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container suse/manager/4.3/proxy-tftpd:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/pcp:5
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container suse/postgres:14
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container suse/sle-micro-rancher/5.3:latest
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/sle-micro-rancher/5.4:latest
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/sle-micro/5.3/toolbox:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/sle-micro/5.4/toolbox:latest
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Container suse/sle15:15.4
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS-Aliyun
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-CHOST-BYOS-SAP-CCloud
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-HPC-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Hardened-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Hardened-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Hardened-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Hardened-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-3-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-Micro-5-4-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-BYOS-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAP-Hardened-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAPCAL
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAPCAL-Azure
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAPCAL-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SAPCAL-GCE
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
Image SLES15-SP4-SUSE-Rancher-Setup-BYOS-EC2
libopenssl1_1-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
SUSE Linux Enterprise Micro 5.3
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
SUSE Linux Enterprise Micro 5.4
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl-1_1-devel-32bit-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
openSUSE Leap 15.4
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl-1_1-devel-32bit-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-32bit-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-32bit-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
openssl-1_1-doc-1.1.1l-150400.7.53.1
openSUSE Leap Micro 5.3
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1
openSUSE Leap Micro 5.4
libopenssl-1_1-devel-1.1.1l-150400.7.53.1
libopenssl1_1-1.1.1l-150400.7.53.1
libopenssl1_1-hmac-1.1.1l-150400.7.53.1
openssl-1_1-1.1.1l-150400.7.53.1

Ссылки

Описание

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

Затронутые продукты
Container bci/bci-init:15.4:libopenssl1_1-1.1.1l-150400.7.53.1
Container bci/bci-init:15.4:libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Container bci/node:16:libopenssl1_1-1.1.1l-150400.7.53.1
Container bci/node:16:libopenssl1_1-hmac-1.1.1l-150400.7.53.1
Ссылки
Уязвимость SUSE-SU-2023:3397-1