Поиск уязвимостей
Количество 51
Количество 51
SUSE-SU-2023:1790-1
Security update for openssl-1_1
ELSA-2023-3722
ELSA-2023-3722: openssl security and bug fix update (MODERATE)
ELSA-2023-12768
ELSA-2023-12768: openssl security update (IMPORTANT)
ALT-PU-2023-1876
ALT-PU-2023-1876: package `openssl1.1` update to version 1.1.1t-alt3
ALT-PU-2023-1804
ALT-PU-2023-1804: package `openssl1.1` update to version 1.1.1t-alt2
SUSE-SU-2023:1926-1
Security update for openssl1
SUSE-SU-2023:1922-1
Security update for openssl-1_0_0
SUSE-SU-2023:1914-1
Security update for openssl-1_0_0
SUSE-SU-2023:1911-1
Security update for openssl-1_1
SUSE-SU-2023:1908-1
Security update for openssl-1_1
SUSE-SU-2023:1907-1
Security update for openssl
SUSE-SU-2023:1898-1
Security update for openssl-3
SUSE-SU-2023:1794-1
Security update for openssl-1_1
CVE-2023-0464
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.
CVE-2023-0464
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.
CVE-2023-0464
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.
CVE-2023-0464
OpenSSL: CVE-2023-0464 Excessive Resource Usage Verifying X.509 Policy Constraints
CVE-2023-0464
A security vulnerability has been identified in all supported versions ...
SUSE-SU-2023:1764-1
Security update for openssl
SUSE-SU-2023:1754-1
Security update for openssl1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2023:1790-1 Security update for openssl-1_1 | больше 3 лет назад | ||
| ELSA-2023-3722 ELSA-2023-3722: openssl security and bug fix update (MODERATE) | больше 3 лет назад | ||
| ELSA-2023-12768 ELSA-2023-12768: openssl security update (IMPORTANT) | около 3 лет назад | ||
| ALT-PU-2023-1876 ALT-PU-2023-1876: package `openssl1.1` update to version 1.1.1t-alt3 | CVSS3: 7.5 | больше 3 лет назад | |
| ALT-PU-2023-1804 ALT-PU-2023-1804: package `openssl1.1` update to version 1.1.1t-alt2 | CVSS3: 7.5 | больше 3 лет назад | |
| SUSE-SU-2023:1926-1 Security update for openssl1 | больше 3 лет назад | ||
| SUSE-SU-2023:1922-1 Security update for openssl-1_0_0 | больше 3 лет назад | ||
| SUSE-SU-2023:1914-1 Security update for openssl-1_0_0 | больше 3 лет назад | ||
| SUSE-SU-2023:1911-1 Security update for openssl-1_1 | больше 3 лет назад | ||
| SUSE-SU-2023:1908-1 Security update for openssl-1_1 | больше 3 лет назад | ||
| SUSE-SU-2023:1907-1 Security update for openssl | больше 3 лет назад | ||
| SUSE-SU-2023:1898-1 Security update for openssl-3 | больше 3 лет назад | ||
| SUSE-SU-2023:1794-1 Security update for openssl-1_1 | больше 3 лет назад | ||
 | CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function. | CVSS3: 7.5 | 4% Низкий | больше 3 лет назад |
 | CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function. | CVSS3: 5.9 | 4% Низкий | больше 3 лет назад |
 | CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function. | CVSS3: 7.5 | 4% Низкий | больше 3 лет назад |
 | CVE-2023-0464 OpenSSL: CVE-2023-0464 Excessive Resource Usage Verifying X.509 Policy Constraints | CVSS3: 7.5 | 4% Низкий | больше 3 лет назад |
| CVE-2023-0464 A security vulnerability has been identified in all supported versions ... | CVSS3: 7.5 | 4% Низкий | больше 3 лет назад |
| SUSE-SU-2023:1764-1 Security update for openssl | 4% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:1754-1 Security update for openssl1 | 4% Низкий | больше 3 лет назад |
Уязвимостей на страницу