Lucene search
UbuntuUSN-6435-1HistoryOct 18, 2023 - 12:00 a.m.
OpenSSL vulnerabilities
2023-10-1800:00:00
ubuntu.com
64
openssl
ubuntu 18.04 esm
ubuntu 16.04 esm
diffie-hellman
denial of service
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
6.1
Confidence
High
EPSS
0.005
Percentile
77.2%
Releases
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- openssl - Secure Socket Layer (SSL) cryptographic library and tools
Details
It was discovered that OpenSSL incorrectly handled excessively large
Diffie-Hellman parameters. An attacker could possibly use this issue
to cause a denial of service. (CVE-2023-3446)
Bernd Edlinger discovered that OpenSSL incorrectly handled excessively
large Diffie-Hellman parameters. An attacker could possibly use this
issue to cause a denial of service. (CVE-2023-3817)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | libssl1.1 | < 1.1.1-1ubuntu2.1~18.04.23+esm3 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libcrypto1.1-udeb | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libssl-dev | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libssl-doc | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libssl1.1 | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libssl1.1-dbgsym | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libssl1.1-udeb | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssl | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssl-dbgsym | < 1.1.1-1ubuntu2.1~18.04.23 | UNKNOWN |
| Ubuntu | 18.04 | noarch | openssl | < 1.1.1-1ubuntu2.1~18.04.23+esm3 | UNKNOWN |
Related
ubuntucve
ubuntucve
CVE-2023-3817
2023-07-31 00:00:00
nessus
nessus
EulerOS Virtualization 2.10.0 : openssl (EulerOS-SA-2023-3479)
2024-01-16 00:00:00
EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2023-3507)
2024-01-16 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-3513)
2023-12-22 00:00:00
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2023-3103)
2023-11-01 00:00:00
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2023-3386)
2023-12-14 00:00:00
prion
prion
Design/Logic Flaw
2023-07-31 16:15:00
osv
osv
CVE-2023-3817
2023-07-31 16:15:10
openssl vulnerabilities
2023-10-18 19:51:24
openssl vulnerabilities
2023-10-25 12:40:20
redos
redos
ROS-20230907-04
2023-09-07 00:00:00
amazon
amazon
Medium: openssl
2023-09-27 22:15:00
Medium: openssl11
2023-08-31 22:28:00
Medium: edk2
2023-08-17 11:58:00
f5
f5
K000137969 : OpenSSL vulnerability CVE-2023-3817
2023-12-19 00:00:00
K000136903 : OpenSSL Diffie-Hellman vulnerability CVE-2023-3446
2023-09-19 00:00:00
debian
debian
[SECURITY] [DLA 3530-1] openssl security update
2023-08-16 05:56:34
ubuntu
ubuntu
OpenSSL vulnerabilities
2023-10-25 00:00:00
OpenSSL vulnerabilities
2024-03-21 00:00:00
OpenSSL vulnerabilities
2023-10-24 00:00:00
nvd
nvd
CVE-2023-3817
2023-07-31 16:15:10
CVE-2023-3446
2023-07-19 12:15:10
broadcom
broadcom
Excessive time spent checking DH q parameter value (CVE-2023-3817)
2024-04-16 00:00:00
Excessive time spent checking DH keys and parameters (CVE-2023-3446)
2024-04-16 00:00:00
debiancve
debiancve
CVE-2023-3817
2023-07-31 16:15:10
slackware
slackware
[slackware-security] openssl
2023-08-02 17:08:29
cvelist
cvelist
CVE-2023-3817 Excessive time spent checking DH q parameter value
2023-07-31 15:34:13
openssl
openssl
Vulnerability in OpenSSL - Excessive time spent checking DH q parameter value
2023-07-31 00:00:00
Vulnerability in OpenSSL - Excessive time spent checking DH keys and parameters
2023-07-13 00:00:00
alpinelinux
alpinelinux
CVE-2023-3817
2023-07-31 16:15:10
ibm
ibm
cve
cve
CVE-2023-3817
2023-07-31 16:15:10
CVE-2023-3446
2023-07-19 12:15:10
oraclelinux
oraclelinux
openssl security update
2024-01-10 00:00:00
openssl security update
2023-12-18 00:00:00
edk2 security update
2024-02-20 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2023-09-11 16:07:54
Updated quictls packages fix security vulnerabilities
2023-09-30 22:15:40
redhat
redhat
(RHSA-2024:0208) Low: openssl security update
2024-01-11 21:04:17
(RHSA-2024:0154) Low: openssl security update
2024-01-10 16:25:10
(RHSA-2023:7877) Low: openssl security update
2023-12-18 07:10:45
almalinux
almalinux
Low: openssl security update
2023-12-19 00:00:00
cloudfoundry
cloudfoundry
USN-6450-1: OpenSSL vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
wolfi
wolfi
CVE-2023-3446 vulnerabilities
2024-09-28 21:12:41
cgr
cgr
CVE-2023-3446 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2023-07-20 10:29:49
cbl_mariner
cbl_mariner
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
6.1
Confidence
High
EPSS
0.005
Percentile
77.2%
Related for USN-6435-1