Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-4203
HistoryFeb 07, 2023 - 5:27 p.m.

CVE-2022-4203

2023-02-0717:27:45
redhat.com
access.redhat.com
48
flaw
open ssl
buffer overrun
x.509 certificate
name constraint
ca
malicious certificate
signature verification
trusted issuer
certificate verification

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.4%

JSON

A flaw was found in Open SSL. A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification, and requires either a CA to have signed the malicious certificate or for the application to continue certificate verification despite failure to construct a path to a trusted issuer.

Related

github 1
osv 10
prion 1
cgr 1
cvelist 1
rustsec 1
veracode 1
debiancve 1
openssl 1
alpinelinux 1
wolfi 1
cve 1
ubuntucve 1
nessus 28
nvd 1
f5 2
openvas 12
ibm 23
ics 3
ubuntu 1
oraclelinux 2
redhat 3
almalinux 1
rocky 1
fedora 2
freebsd 1
cloudfoundry 1
thn 1
aix 1
mageia 1
gentoo 1
photon 2
oracle 1
github
github
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
2023-02-08 22:27:42
osv
osv
openssl-src contains Read Buffer Overflow in X.509 Name Constraint
2023-02-08 22:27:42
CGA-6432-89h5-cxwc
2024-06-06 12:24:23
CGA-3gfc-9462-mc8m
2024-06-06 12:21:54
prion
prion
Buffer overflow
2023-02-24 15:15:00
cgr
cgr
CVE-2022-4203 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2022-4203 X.509 Name Constraints Read Buffer Overflow
2023-02-24 14:53:08
rustsec
rustsec
X.509 Name Constraints Read Buffer Overflow
2023-02-07 12:00:00
veracode
veracode
Buffer Overflow
2023-02-10 04:58:21
debiancve
debiancve
CVE-2022-4203
2023-02-24 15:15:11
openssl
openssl
Vulnerability in OpenSSL - X.509 Name Constraints Read Buffer Overflow
2023-02-07 00:00:00
alpinelinux
alpinelinux
CVE-2022-4203
2023-02-24 15:15:11
wolfi
wolfi
CVE-2022-4203 vulnerabilities
2024-09-30 03:53:08
cve
cve
CVE-2022-4203
2023-02-24 15:15:11
ubuntucve
ubuntucve
CVE-2022-4203
2023-02-07 00:00:00
nessus
nessus
Siemens SCALANCE OpenSSL Out-of-bounds Read (CVE-2022-4203)
2024-01-11 00:00:00
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
2023-03-06 00:00:00
Tenable Nessus 10.x >= 10.2.1 and < 10.4.3 Multiple Vulnerabilities (TNS-2023-11)
2023-03-08 00:00:00
nvd
nvd
CVE-2022-4203
2023-02-24 15:15:11
f5
f5
K000132537 : OpenSSL vulnerabilities CVE-2022-4203, CVE-2023-0216, CVE-2023-0217, and CVE-2023-0401
2023-02-14 00:00:00
K000132765 : OpenSSL vulnerabilities CVE-2022-4203, CVE-2023-0216, CVE-2023-0217, and CVE-2023-0401
2023-02-27 00:00:00
openvas
openvas
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Windows
2023-02-08 00:00:00
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Linux
2023-02-08 00:00:00
Tenable Nessus 10.2.1 <= 10.4.2 Multiple Vulnerabilities (TNS-2023-11)
2023-05-17 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2022-4450, CVE-2023-0216, CVE-2023-0401, CVE-2022-4203, CVE-2023-0217]
2024-09-28 15:16:20
Security Bulletin: IBM Spectrum Control is vulnerable to multiple weaknesses related to OpenSSL
2023-06-23 10:33:10
Security Bulletin: Vulnerabilities in OpenSSL might affect IBM Spectrum Copy Data Management (CVE-2022-4450, CVE-2023-0216, CVE-2023-0401, CVE-2022-4203, CVE-2023-0217)
2023-06-16 19:26:28
ics
ics
​ICONICS and Mitsubishi Electric Products
2023-08-17 12:00:00
Siemens SCALANCE Family Products
2023-11-16 12:00:00
Siemens SINEC NMS
2024-02-15 12:00:00
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-02-07 00:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2023-02-28 00:00:00
openssl security update
2023-03-01 00:00:00
redhat
redhat
(RHSA-2023:0946) Important: openssl security and bug fix update
2023-02-28 07:52:54
(RHSA-2023:1199) Important: openssl security and bug fix update
2023-03-14 13:18:56
(RHSA-2023:1326) Important: OpenShift Container Platform 4.13.0 security update
2023-05-17 22:28:04
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-02-28 00:00:00
rocky
rocky
openssl security and bug fix update
2023-03-29 16:47:51
fedora
fedora
[SECURITY] Fedora 37 Update: openssl-3.0.8-1.fc37
2023-02-11 00:33:44
[SECURITY] Fedora 36 Update: openssl-3.0.8-1.fc36
2023-02-22 11:09:09
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2023-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5844-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
thn
thn
OpenSSL Fixes Multiple New Security Flaws with Latest Update
2023-02-09 09:51:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-03-21 13:26:15
mageia
mageia
Updated openssl packages fix security vulnerability
2023-04-11 22:02:20
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2024-02-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0330
2023-02-09 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.4%

JSON
Related for RH:CVE-2022-4203
github1osv10prion1cgr1cvelist1rustsec1veracode1debiancve1openssl1alpinelinux1wolfi1cve1ubuntucve1nessus28nvd1f52openvas12ibm23ics3ubuntu1oraclelinux2redhat3almalinux1rocky1fedora2freebsd1cloudfoundry1thn1aix1mageia1gentoo1photon2oracle1