Lucene search
Veracode Vulnerability DatabaseVERACODE:39215HistoryFeb 11, 2023 - 9:36 a.m.
NULL Pointer Dereference
2023-02-1109:36:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
23
openssl
vulnerability
null pointer
dereference
initialization
function
invalid usage
crash
0.004 Low
EPSS
Percentile
72.3%
openssl is vulnerable to null point dereference. The vulnerability exists because there is a missing check for the return value from the initialization function which later leads to invalid usage of the digest api most likely leading to a crash.
References
git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=d3b6dfd70db844c4499bec6ad6601623a565e674
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
secdb.alpinelinux.org/v3.16/main.yaml
secdb.alpinelinux.org/v3.17/main.yaml
security.gentoo.org/glsa/202402-08
www.openssl.org/news/secadv/20230207.txt
Related
osv
osv
`NULL` dereference during PKCS7 data verification
2023-02-07 12:00:00
openssl-src contains `NULL` dereference during PKCS7 data verification
2023-02-08 22:21:22
CVE-2023-0401
2023-02-08 20:15:24
openssl
openssl
Vulnerability in OpenSSL CVE-2023-0401
2023-02-07 00:00:00
cgr
cgr
CVE-2023-0401 vulnerabilities
2024-05-19 03:07:16
rustsec
rustsec
`NULL` dereference during PKCS7 data verification
2023-02-07 12:00:00
debiancve
debiancve
CVE-2023-0401
2023-02-08 20:15:24
alpinelinux
alpinelinux
CVE-2023-0401
2023-02-08 20:15:24
nessus
nessus
Siemens SCALANCE OpenSSL NULL Pointer Dereference (CVE-2023-0401)
2024-01-11 00:00:00
Ubuntu 22.04 LTS : Node.js vulnerabilities (USN-6564-1)
2024-01-03 00:00:00
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
2023-03-06 00:00:00
ubuntucve
ubuntucve
CVE-2023-0401
2023-02-07 00:00:00
cve
cve
CVE-2023-0401
2023-02-08 20:15:24
wolfi
wolfi
CVE-2023-0401 vulnerabilities
2024-07-01 09:08:36
redhatcve
redhatcve
CVE-2023-0401
2023-02-07 17:30:58
prion
prion
Null pointer dereference
2023-02-08 20:15:00
cvelist
cvelist
CVE-2023-0401 NULL dereference during PKCS7 data verification
2023-02-08 19:00:53
github
github
openssl-src contains `NULL` dereference during PKCS7 data verification
2023-02-08 22:21:22
nvd
nvd
CVE-2023-0401
2023-02-08 20:15:24
openvas
openvas
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Linux
2023-02-08 00:00:00
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Windows
2023-02-08 00:00:00
Ubuntu: Security Advisory (USN-6564-1)
2024-01-04 00:00:00
redos
redos
ROS-20230418-05
2023-04-18 00:00:00
f5
f5
ubuntu
ubuntu
Node.js vulnerabilities
2024-01-03 00:00:00
OpenSSL vulnerabilities
2023-02-07 00:00:00
ibm
ibm
ics
ics
ICONICS and Mitsubishi Electric Products
2023-08-17 12:00:00
Siemens SCALANCE Family Products
2023-11-16 12:00:00
Siemens SINEC NMS
2024-02-15 12:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2023-02-28 00:00:00
openssl security update
2023-03-01 00:00:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2023-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5844-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: openssl-3.0.8-1.fc36
2023-02-22 11:09:09
[SECURITY] Fedora 37 Update: openssl-3.0.8-1.fc37
2023-02-11 00:33:44
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-02-28 00:00:00
redhat
redhat
(RHSA-2023:0946) Important: openssl security and bug fix update
2023-02-28 07:52:54
(RHSA-2023:1199) Important: openssl security and bug fix update
2023-03-14 13:18:56
rocky
rocky
openssl security and bug fix update
2023-03-29 16:47:51
thn
thn
OpenSSL Fixes Multiple New Security Flaws with Latest Update
2023-02-09 09:51:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-03-21 13:26:15
mageia
mageia
Updated openssl packages fix security vulnerability
2023-04-11 22:02:20
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2024-02-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0330
2023-02-09 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00