Lucene search
OpenSSLOPENSSL:CVE-2022-4203HistoryFeb 07, 2023 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2022-4203
2023-02-0700:00:00
www.openssl.org
42
openssl
cve-2022-4203
x.509
certificate verification
name constraint checking
read buffer overrun
malicious certificate
certificate chain signature
trusted issuer
software security
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.8%
A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer.
Related
github
github
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
2023-02-08 22:27:42
prion
prion
Buffer overflow
2023-02-24 15:15:00
cvelist
cvelist
CVE-2022-4203 X.509 Name Constraints Read Buffer Overflow
2023-02-24 14:53:08
osv
osv
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
2023-02-08 22:27:42
X.509 Name Constraints Read Buffer Overflow
2023-02-07 12:00:00
CVE-2022-4203
2023-02-24 15:15:11
cgr
cgr
CVE-2022-4203 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2022-4203
2023-02-07 17:27:45
nvd
nvd
CVE-2022-4203
2023-02-24 15:15:11
nessus
nessus
Siemens SCALANCE OpenSSL Out-of-bounds Read (CVE-2022-4203)
2024-01-11 00:00:00
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
2023-03-06 00:00:00
ubuntucve
ubuntucve
CVE-2022-4203
2023-02-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-4203
2023-02-24 15:15:11
veracode
veracode
Buffer Overflow
2023-02-10 04:58:21
rustsec
rustsec
X.509 Name Constraints Read Buffer Overflow
2023-02-07 12:00:00
debiancve
debiancve
CVE-2022-4203
2023-02-24 15:15:11
wolfi
wolfi
CVE-2022-4203 vulnerabilities
2024-07-01 09:08:36
cve
cve
CVE-2022-4203
2023-02-24 15:15:11
openvas
openvas
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Linux
2023-02-08 00:00:00
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Windows
2023-02-08 00:00:00
Tenable Nessus 10.2.1 <= 10.4.2 Multiple Vulnerabilities (TNS-2023-11)
2023-05-17 00:00:00
f5
f5
ibm
ibm
ics
ics
ICONICS and Mitsubishi Electric Products
2023-08-17 12:00:00
Siemens SCALANCE Family Products
2023-11-16 12:00:00
Siemens SINEC NMS
2024-02-15 12:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2023-02-28 00:00:00
openssl security update
2023-03-01 00:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-02-07 00:00:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2023-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5844-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: openssl-3.0.8-1.fc36
2023-02-22 11:09:09
[SECURITY] Fedora 37 Update: openssl-3.0.8-1.fc37
2023-02-11 00:33:44
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-02-28 00:00:00
redhat
redhat
(RHSA-2023:0946) Important: openssl security and bug fix update
2023-02-28 07:52:54
(RHSA-2023:1199) Important: openssl security and bug fix update
2023-03-14 13:18:56
rocky
rocky
openssl security and bug fix update
2023-03-29 16:47:51
thn
thn
OpenSSL Fixes Multiple New Security Flaws with Latest Update
2023-02-09 09:51:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-03-21 13:26:15
mageia
mageia
Updated openssl packages fix security vulnerability
2023-04-11 22:02:20
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2024-02-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0330
2023-02-09 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.8%
Related for OPENSSL:CVE-2022-4203