Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash.

cgr 1

osv 3

openvas 11

nvd 1

f5 1

ubuntucve 1

cvelist 1

veracode 1

redhatcve 1

cve 1

prion 1

debiancve 1

wolfi 1

broadcom 1

alpinelinux 1

nessus 17

cloudfoundry 1

ubuntu 1

fedora 2

almalinux 1

oraclelinux 2

redhat 8

ibm 8

photon 2

ics 1

hp 2

tenable 1

oracle 3

cgr

CVE-2023-1255 vulnerabilities

2024-05-19 03:07:16

osv

CVE-2023-1255

2023-04-20 17:15:06

openssl, openssl1.0 vulnerabilities

2023-05-30 14:16:59

Moderate: openssl security and bug fix update

2023-06-21 00:00:00

openvas

OpenSSL 3.0 <= 3.0.8, 3.1.0 DoS Vulnerability

2023-04-21 00:00:00

Ubuntu: Security Advisory (USN-6119-1)

2023-05-31 00:00:00

Tenable Nessus Agent < 10.4.1 Multiple Vulnerabilities (TNS-2023-24)

2023-11-02 00:00:00

nvd

CVE-2023-1255

2023-04-20 17:15:06

K000133752 : OpenSSL vulnerability CVE-2023-1255

2023-05-01 00:00:00

ubuntucve

CVE-2023-1255

2023-04-20 00:00:00

cvelist

CVE-2023-1255 Input buffer over-read in AES-XTS implementation on 64 bit ARM

2023-04-20 16:14:54

veracode

Denial Of Services (DoS)

2023-05-15 06:35:51

redhatcve

CVE-2023-1255

2023-04-20 20:59:39

cve

CVE-2023-1255

2023-04-20 17:15:06

prion

Input validation

2023-04-20 17:15:00

debiancve

CVE-2023-1255

2023-04-20 17:15:06

wolfi

CVE-2023-1255 vulnerabilities

2024-07-01 09:08:36

broadcom

CVE-2023-1255 - Possible denial of service on Arm 64 (aarch64) using AES XTS mode

2023-05-18 00:00:00

alpinelinux

CVE-2023-1255

2023-04-20 17:15:06

nessus

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssl-3 (SUSE-SU-2023:2620-1)

2023-06-25 00:00:00

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : OpenSSL vulnerabilities (USN-6119-1)

2023-05-30 00:00:00

Tenable Nessus Agent < 10.4.1 Multiple Vulnerabilities (TNS-2023-24)

2023-07-07 00:00:00

cloudfoundry

USN-6119-1: OpenSSL vulnerabilities | Cloud Foundry

2023-06-30 00:00:00

ubuntu

OpenSSL vulnerabilities

2023-05-30 00:00:00

fedora

[SECURITY] Fedora 37 Update: openssl-3.0.9-1.fc37

2023-06-04 01:24:09

[SECURITY] Fedora 38 Update: openssl-3.0.9-1.fc38

2023-06-03 02:46:16

almalinux

Moderate: openssl security and bug fix update

2023-06-21 00:00:00

oraclelinux

openssl security and bug fix update

2023-06-22 00:00:00

openssl security update

2023-08-31 00:00:00

redhat

(RHSA-2023:3722) Moderate: openssl security and bug fix update

2023-06-21 13:52:15

(RHSA-2023:4437) Moderate: Red Hat OpenShift Data Foundation 4.13.1 security and bug fix update

2023-08-02 16:06:00

(RHSA-2023:3905) Important: Network observability 1.3.0 for Openshift

2023-06-28 15:41:08

ibm

Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities

2023-11-22 15:33:01

Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities

2023-07-25 13:36:35

Security Bulletin: Multiple vulnerabilities in IBM Java, OpenSSL, and libcurl may affect IBM Storage Protect for Virtual Environments: Data Protection for Microsoft Hyper-V

2024-04-04 18:41:01

photon

Critical Photon OS Security Update - PHSA-2023-4.0-0417

2023-06-30 00:00:00

Important Photon OS Security Update - PHSA-2023-5.0-0041

2023-06-29 00:00:00

ics

Siemens SINEC NMS

2024-02-15 12:00:00

HP ThinPro 8.0 SP 7 Security Updates

2024-01-26 00:00:00

HP Device Manager Security Updates

2023-10-20 00:00:00

tenable

[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities

2023-06-29 10:45:47

oracle

Oracle Critical Patch Update Advisory - October 2023

2023-10-17 00:00:00

Oracle Critical Patch Update Advisory - July 2023

2023-07-18 00:00:00

Oracle Critical Patch Update Advisory - April 2024

2024-04-16 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

Related for OPENSSL:CVE-2023-1255