CVE-2023-0286
Summary
| CVE | CVE-2023-0286 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-02-08 20:15:00 UTC |
| Updated | 2024-02-04 09:15:00 UTC |
| Description | There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network. |
Risk And Classification
Problem Types: CWE-843
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Openssl | Openssl | All | All | All | All |
| Application | Stormshield | Stormshield Management Center | All | All | All | All |
| Application | Stormshield | Stormshield Network Security | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.openssl.org/news/secadv/20230207.txt | MISC | www.openssl.org | |
| ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt | MISC | ftp.openbsd.org | |
| OpenSSL: Multiple Vulnerabilities (GLSA 202402-08) — Gentoo security | security.gentoo.org | ||
| git.openssl.org Git - openssl.git/commitdiff | MISC | git.openssl.org | |
| git.openssl.org Git - openssl.git/commitdiff | MISC | git.openssl.org | |
| ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig | MISC | ftp.openbsd.org | |
| git.openssl.org Git - openssl.git/commitdiff | MISC | git.openssl.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160481 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-0946)
- 160492 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12152)
- 160512 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-1335)
- 160517 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12205)
- 160519 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12210)
- 160521 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-1405)
- 160523 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12213)
- 160563 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12297)
- 160576 Oracle Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ELSA-2023-12326)
- 160621 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-2165)
- 160668 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-2932)
- 161209 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-13026)
- 161210 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-13024)
- 161212 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-32791)
- 161213 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-13025)
- 161214 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-13027)
- 161215 Oracle Enterprise Linux Security Update for edk2 (ELSA-2023-32790)
- 181546 Debian Security Update for Open Secure Sockets Layer (OpenSSL) (DSA 5343-1)
- 181593 Debian Security Update for Open Secure Sockets Layer (OpenSSL) (DLA 3325-1)
- 182233 Debian Security Update for Open Secure Sockets Layer (OpenSSL) (CVE-2023-0286)
- 199150 Ubuntu Security Notification for Open Secure Sockets Layer (OpenSSL) Vulnerabilities (USN-5844-1)
- 199151 Ubuntu Security Notification for Open Secure Sockets Layer (OpenSSL) Vulnerabilities (USN-5845-1)
- 199518 Ubuntu Security Notification for Open Secure Sockets Layer (OpenSSL) Vulnerabilities (USN-5845-2)
- 200021 Ubuntu Security Notification for Node.js Vulnerabilities (USN-6564-1)
- 241227 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:0946)
- 241256 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1199)
- 241274 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1335)
- 241285 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1405)
- 241291 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1440)
- 241292 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1441)
- 241396 Red Hat Update for edk2 (RHSA-2023:2022)
- 241469 Red Hat Update for edk2 security (RHSA-2023:2165)
- 241496 Red Hat Update for edk2 (RHSA-2023:2932)
- 241574 Red Hat Update for JBoss Core Services (RHSA-2023:3354)
- 241614 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1437)
- 241652 Red Hat Update for Open Secure Sockets Layer (OpenSSL) (RHSA-2023:1439)
- 241833 Red Hat Update for edk2 (RHSA-2023:4128)
- 241835 Red Hat Update for edk2 (RHSA-2023:4124)
- 241861 Red Hat Update for edk2 (RHSA-2023:4252)
- 257231 CentOS Security Update for Open Secure Sockets Layer (OpenSSL) (CESA-2023:1335)
- 283694 Fedora Security Update for Open Secure Sockets Layer (OpenSSL) (FEDORA-2023-57f33242bc)
- 283709 Fedora Security Update for edk2 (FEDORA-2023-e1ffb79ddf)
- 283736 Fedora Security Update for Open Secure Sockets Layer (OpenSSL) (FEDORA-2023-a5564c0a3f)
- 283759 Fedora Security Update for edk2 (FEDORA-2023-e821b64a4c)
- 330133 IBM Advanced Interactive eXecutive (AIX) Open Secure Sockets Layer (OpenSSL) Multiple Vulnerabilities (openssl_advisory38)
- 354734 Amazon Linux Security Advisory for Open Secure Sockets Layer (OpenSSL) : ALAS-2023-1683
- 354735 Amazon Linux Security Advisory for Open Secure Sockets Layer11 (OpenSSL11) : ALAS2-2023-1934
- 354737 Amazon Linux Security Advisory for Open Secure Sockets Layer (OpenSSL) : ALAS2-2023-1935
- 355058 Amazon Linux Security Advisory for Open Secure Sockets Layer (OpenSSL) : AL2012-2023-382
- 355230 Amazon Linux Security Advisory for Open Secure Sockets Layer (OpenSSL) : ALAS2023-2023-101
- 356233 Amazon Linux Security Advisory for openssl-snapsafe : ALASOPENSSL-SNAPSAFE-2023-002
- 356483 Amazon Linux Security Advisory for openssl-snapsafe : ALAS2OPENSSL-SNAPSAFE-2023-002
- 357333 Amazon Linux Security Advisory for edk2 : ALAS2-2024-2502
- 378348 Zimbra Collaboration Multiple Vulnerabilities
- 378416 Alibaba Cloud Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ALINUX3-SA-2023:0033)
- 378423 Alibaba Cloud Linux Security Update for Open Secure Sockets Layer (OpenSSL) (ALINUX2-SA-2023:0016)
- 378449 F5 BIG-IP Denial of Service (DoS) Vulnerability (K000132941)
- 378491 NetApp Clustered Data Open Network Technology for Appliance Products (ONTAP) Multiple OpenSSL Denial of Service (DoS) Vulnerabilities (NTAP-20230214-0011)
- 378515 Alibaba Cloud Linux Security Update for edk2 (ALINUX3-SA-2023:0044)
- 378599 Splunk Enterprise Third Party Package Updates for June (SVD-2023-0613)
- 38894 Open Secure Sockets Layer (OpenSSL) Multiple Vulnerabilities
- 390284 Oracle Managed Virtualization (VM) Server for x86 Security Update for Open Secure Sockets Layer (OpenSSL) (OVMSA-2023-0013)
- 43991 Hewlett Packard Enterprise (HPE) ArubaOS Multiple Vulnerabilities (ARUBA-PSA-2023-001)
- 502652 Alpine Linux Security Update for Open Secure Sockets Layer (OpenSSL)
- 502653 Alpine Linux Security Update for Open Secure Sockets Layer3 (OpenSSL3)
- 502757 Alpine Linux Security Update for openssl
- 502907 Alpine Linux Security Update for openssl1.1-compat
- 505784 Alpine Linux Security Update for openssl1.1-compat
- 520011 Open Secure Sockets Layer (OpenSSL) Type Confusion Vulnerability (CVE-2023-0286)
- 672879 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-1602)
- 672970 EulerOS Security Update for shim (EulerOS-SA-2023-1853)
- 672980 EulerOS Security Update for shim (EulerOS-SA-2023-1878)
- 672984 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-1875)
- 673006 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-1850)
- 673018 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-1982)
- 673033 EulerOS Security Update for shim (EulerOS-SA-2023-1984)
- 673042 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-1960)
- 673044 EulerOS Security Update for shim (EulerOS-SA-2023-1962)
- 673064 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-2161)
- 673136 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-2299)
- 673145 EulerOS Security Update for shim (EulerOS-SA-2023-2301)
- 673151 EulerOS Security Update for shim (EulerOS-SA-2023-2277)
- 673156 EulerOS Security Update for Open Secure Sockets Layer (OpenSSL) (EulerOS-SA-2023-2275)
- 673398 EulerOS Security Update for linux-sgx (EulerOS-SA-2023-3047)
- 691051 Free Berkeley Software Distribution (FreeBSD) Security Update for Open Secure Sockets Layer (OpenSSL) (648a432c-a71f-11ed-86e9-d4c9ef517024)
- 691136 Free Berkeley Software Distribution (FreeBSD) Security Update for py (c1a8ed1c-2814-4260-82aa-9e37c83aac93)
- 691183 Free Berkeley Software Distribution (FreeBSD) Security Update for python (d86becfe-05a4-11ee-9d4a-080027eda32c)
- 710857 Gentoo Linux Open Secure Sockets Layer (OpenSSL) Multiple Vulnerabilities (GLSA 202402-08)
- 730818 IBM MQ Appliance Multiple Security Vulnerabilities (6986567)
- 753631 SUSE Enterprise Linux Security Update for openssl-1_0_0 (SUSE-SU-2023:0305-1)
- 753633 SUSE Enterprise Linux Security Update for openssl1 (SUSE-SU-2023:0307-1)
- 753634 SUSE Enterprise Linux Security Update for openssl-1_0_0 (SUSE-SU-2023:0306-1)
- 753636 SUSE Enterprise Linux Security Update for openssl-1_1 (SUSE-SU-2023:0310-1)
- 753637 SUSE Enterprise Linux Security Update for openssl-1_1 (SUSE-SU-2023:0308-1)
- 753640 SUSE Enterprise Linux Security Update for openssl-3 (SUSE-SU-2023:0312-1)
- 753647 SUSE Enterprise Linux Security Update for openssl-1_1 (SUSE-SU-2023:0311-1)
- 753649 SUSE Enterprise Linux Security Update for openssl-1_1 (SUSE-SU-2023:0309-1)
- 754071 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305)
- 754072 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305-2)
- 754079 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305)
- 754080 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305)
- 754084 SUSE Enterprise Linux Security Update for openssl-1_0_0 (SUSE-SU-2023:0305)
- 754085 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305)
- 754086 SUSE Enterprise Linux Security Update for Open Secure Sockets Layer (OpenSSL)-1_0_0 (SUSE-SU-2023:0305)
- 754087 SUSE Enterprise Linux Security Update for openssl-1_0_0 (SUSE-SU-2023:0305)
- 754088 SUSE Enterprise Linux Security Update for openssl-1_0_0 (SUSE-SU-2023:0305)
- 905551 Common Base Linux Mariner (CBL-Mariner) Security Update for Open Secure Sockets Layer (OpenSSL) (13566)
- 905552 Common Base Linux Mariner (CBL-Mariner) Security Update for Open Secure Sockets Layer (OpenSSL) (13564)
- 905555 Common Base Linux Mariner (CBL-Mariner) Security Update for Open Secure Sockets Layer (OpenSSL) (13566-1)
- 905562 Common Base Linux Mariner (CBL-Mariner) Security Update for Open Secure Sockets Layer (OpenSSL) (13564-1)
- 905627 Common Base Linux Mariner (CBL-Mariner) Security Update for cloud-hypervisor (13698)
- 905629 Common Base Linux Mariner (CBL-Mariner) Security Update for rust (13700)
- 905630 Common Base Linux Mariner (CBL-Mariner) Security Update for rust (13705)
- 905632 Common Base Linux Mariner (CBL-Mariner) Security Update for cloud-hypervisor (13701)
- 905634 Common Base Linux Mariner (CBL-Mariner) Security Update for reaper (13704)
- 906772 Common Base Linux Mariner (CBL-Mariner) Security Update for cloud-hypervisor (13701-1)
- 940941 AlmaLinux Security Update for Open Secure Sockets Layer (OpenSSL) (ALSA-2023:0946)
- 940962 AlmaLinux Security Update for Open Secure Sockets Layer (OpenSSL) (ALSA-2023:1405)
- 941044 AlmaLinux Security Update for edk2 (ALSA-2023:2165)
- 941103 AlmaLinux Security Update for edk2 (ALSA-2023:2932)
- 960886 Rocky Linux Security Update for Open Secure Sockets Layer (OpenSSL) (RLSA-2023:1405)
- 960889 Rocky Linux Security Update for Open Secure Sockets Layer (OpenSSL) (RLSA-2023:0946)