OpenSSL vulnerabilities

2024-02-1300:00:00

ubuntu.com

ubuntu

openssl

esm

x9.42 dh keys

denial of service

cve-2023-5678

pkcs12 files

cve-2024-0727

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

David Benjamin discovered that OpenSSL incorrectly handled excessively long
X9.42 DH keys. A remote attacker could possibly use this issue to cause
OpenSSL to consume resources, leading to a denial of service.
(CVE-2023-5678)

Bahaa Naamneh discovered that OpenSSL incorrectly handled certain malformed
PKCS12 files. A remote attacker could possibly use this issue to cause
OpenSSL to crash, resulting in a denial of service. (CVE-2024-0727)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchlibssl1.1< 1.1.1-1ubuntu2.1~18.04.23+esm4UNKNOWN
Ubuntu18.04noarchlibcrypto1.1-udeb< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchlibssl-dev< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchlibssl-doc< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchlibssl1.1< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchlibssl1.1-dbgsym< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchlibssl1.1-udeb< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchopenssl< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu18.04noarchopenssl-dbgsym< 1.1.1-1ubuntu2.1~18.04.23UNKNOWN
Ubuntu16.04noarchlibssl1.0.0< 1.0.2g-1ubuntu4.20+esm11UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	libssl1.1	< 1.1.1-1ubuntu2.1~18.04.23+esm4	UNKNOWN
Ubuntu	18.04	noarch	libcrypto1.1-udeb	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	libssl-dev	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	libssl-doc	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	libssl1.1	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	libssl1.1-dbgsym	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	libssl1.1-udeb	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	openssl	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	18.04	noarch	openssl-dbgsym	< 1.1.1-1ubuntu2.1~18.04.23	UNKNOWN
Ubuntu	16.04	noarch	libssl1.0.0	< 1.0.2g-1ubuntu4.20+esm11	UNKNOWN