rhsa-2024:2447
Vulnerability from csaf_redhat
Published
2024-04-30 10:36
Modified
2025-01-09 06:19
Summary
Red Hat Security Advisory: openssl and openssl-fips-provider security update
Notes
Topic
An update for openssl and openssl-fips-provider is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975)
* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)
* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)
* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)
* openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
* openssl: denial of service via null dereference (CVE-2024-0727)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openssl and openssl-fips-provider is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975)\n\n* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n\n* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)\n\n* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)\n\n* openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)\n\n* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)\n\n* openssl: denial of service via null dereference (CVE-2024-0727)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:2447",
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index"
},
{
"category": "external",
"summary": "2223016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2223016"
},
{
"category": "external",
"summary": "2224962",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224962"
},
{
"category": "external",
"summary": "2227852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2227852"
},
{
"category": "external",
"summary": "2248616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248616"
},
{
"category": "external",
"summary": "2257571",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257571"
},
{
"category": "external",
"summary": "2258502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258502"
},
{
"category": "external",
"summary": "2259944",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259944"
},
{
"category": "external",
"summary": "RHEL-14083",
"url": "https://issues.redhat.com/browse/RHEL-14083"
},
{
"category": "external",
"summary": "RHEL-15990",
"url": "https://issues.redhat.com/browse/RHEL-15990"
},
{
"category": "external",
"summary": "RHEL-17104",
"url": "https://issues.redhat.com/browse/RHEL-17104"
},
{
"category": "external",
"summary": "RHEL-17193",
"url": "https://issues.redhat.com/browse/RHEL-17193"
},
{
"category": "external",
"summary": "RHEL-1780",
"url": "https://issues.redhat.com/browse/RHEL-1780"
},
{
"category": "external",
"summary": "RHEL-20249",
"url": "https://issues.redhat.com/browse/RHEL-20249"
},
{
"category": "external",
"summary": "RHEL-5295",
"url": "https://issues.redhat.com/browse/RHEL-5295"
},
{
"category": "external",
"summary": "RHEL-5304",
"url": "https://issues.redhat.com/browse/RHEL-5304"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2447.json"
}
],
"title": "Red Hat Security Advisory: openssl and openssl-fips-provider security update",
"tracking": {
"current_release_date": "2025-01-09T06:19:35+00:00",
"generator": {
"date": "2025-01-09T06:19:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.5"
}
},
"id": "RHSA-2024:2447",
"initial_release_date": "2024-04-30T10:36:25+00:00",
"revision_history": [
{
"date": "2024-04-30T10:36:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-04-30T10:36:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-01-09T06:19:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.src",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.src",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-27.el9.src",
"product": {
"name": "openssl-1:3.0.7-27.el9.src",
"product_id": "openssl-1:3.0.7-27.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"product": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"product_id": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"product": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"product_id": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-devel-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-devel-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-perl-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-perl-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-debugsource-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-debugsource-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-27.el9.aarch64",
"product": {
"name": "openssl-libs-1:3.0.7-27.el9.aarch64",
"product_id": "openssl-libs-1:3.0.7-27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"product": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"product_id": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"product": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"product_id": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-devel-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-devel-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-perl-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-perl-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-27.el9.ppc64le",
"product": {
"name": "openssl-libs-1:3.0.7-27.el9.ppc64le",
"product_id": "openssl-libs-1:3.0.7-27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.i686",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.i686",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"product": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"product_id": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"product": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"product_id": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-27.el9.i686",
"product": {
"name": "openssl-devel-1:3.0.7-27.el9.i686",
"product_id": "openssl-devel-1:3.0.7-27.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-27.el9.i686",
"product": {
"name": "openssl-debugsource-1:3.0.7-27.el9.i686",
"product_id": "openssl-debugsource-1:3.0.7-27.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-27.el9.i686",
"product": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.i686",
"product_id": "openssl-debuginfo-1:3.0.7-27.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"product_id": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-27.el9.i686",
"product": {
"name": "openssl-libs-1:3.0.7-27.el9.i686",
"product_id": "openssl-libs-1:3.0.7-27.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"product": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"product_id": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"product": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"product_id": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-devel-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-devel-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-perl-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-perl-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-debugsource-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-debugsource-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-27.el9.x86_64",
"product": {
"name": "openssl-libs-1:3.0.7-27.el9.x86_64",
"product_id": "openssl-libs-1:3.0.7-27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-fips-provider-0:3.0.7-2.el9.s390x",
"product": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.s390x",
"product_id": "openssl-fips-provider-0:3.0.7-2.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"product": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"product_id": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"product": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"product_id": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-devel-1:3.0.7-27.el9.s390x",
"product_id": "openssl-devel-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-perl-1:3.0.7-27.el9.s390x",
"product_id": "openssl-perl-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-debugsource-1:3.0.7-27.el9.s390x",
"product_id": "openssl-debugsource-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.s390x",
"product_id": "openssl-debuginfo-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"product_id": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-1:3.0.7-27.el9.s390x",
"product_id": "openssl-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-27.el9.s390x",
"product": {
"name": "openssl-libs-1:3.0.7-27.el9.s390x",
"product_id": "openssl-libs-1:3.0.7-27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src"
},
"product_reference": "openssl-1:3.0.7-27.el9.src",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src"
},
"product_reference": "openssl-1:3.0.7-27.el9.src",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-devel-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.src",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64"
},
"product_reference": "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64"
},
"product_reference": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686"
},
"product_reference": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le"
},
"product_reference": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x"
},
"product_reference": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64"
},
"product_reference": "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64"
},
"product_reference": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686"
},
"product_reference": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le"
},
"product_reference": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x"
},
"product_reference": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
},
"product_reference": "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-libs-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
},
"product_reference": "openssl-perl-1:3.0.7-27.el9.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-2975",
"discovery_date": "2023-07-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2223016"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding, or reordering such empty entries as these are ignored by the OpenSSL implementation. The AES-SIV algorithm allows for the authentication of multiple associated data entries and encryption. To authenticate empty data, the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with a NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL returns success for such a call instead of performing the associated data authentication operation. Thus, the empty data will not be authenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue does not affect Red Hat Enterprise Linux 6, 7, and 8 as the vulnerable OpenSSL package is currently not shipped. As this issue does not affect non-empty associated data authentication and we expect it to be rare for an application to use empty associated data entries, this is rated with a Low severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-2975"
},
{
"category": "external",
"summary": "RHBZ#2223016",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2223016"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-2975",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-2975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-2975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2975"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20230714.txt",
"url": "https://www.openssl.org/news/secadv/20230714.txt"
}
],
"release_date": "2023-07-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries"
},
{
"cve": "CVE-2023-3446",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2224962"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Excessive time spent checking DH keys and parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The CVE-2023-3446 vulnerability in OpenSSL has been classified as having a low impact due to several factors. Firstly, while the potential for a Denial of Service (DoS) attack exists, it requires specific conditions to be met, notably the use of DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions with DH keys or parameters obtained from untrusted sources. Secondly, the issue primarily affects the efficiency of key and parameter checks, rather than directly compromising the security or integrity of cryptographic operations. Given these considerations and the absence of widespread exploitation or significant consequences beyond performance degradation, the overall impact of this vulnerability is deemed low rather than moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-3446"
},
{
"category": "external",
"summary": "RHBZ#2224962",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224962"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-3446",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3446"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20230719.txt",
"url": "https://www.openssl.org/news/secadv/20230719.txt"
}
],
"release_date": "2023-07-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Excessive time spent checking DH keys and parameters"
},
{
"cve": "CVE-2023-3817",
"discovery_date": "2023-07-31T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2227852"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSL: Excessive time spent checking DH q parameter value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in OpenSSL is considered low severity primarily because it requires specific conditions to be exploited and has limited impact. While excessive computation time during DH parameter checks could potentially lead to denial of service (DoS) attacks, the likelihood of successful exploitation is relatively low. Additionally, the vulnerability mainly affects applications that use certain OpenSSL functions for DH parameter validation, rather than the broader SSL/TLS implementation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-3817"
},
{
"category": "external",
"summary": "RHBZ#2227852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2227852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-3817",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20230731.txt",
"url": "https://www.openssl.org/news/secadv/20230731.txt"
}
],
"release_date": "2023-07-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "OpenSSL: Excessive time spent checking DH q parameter value"
},
{
"cve": "CVE-2023-5678",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2023-11-07T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2248616"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in OpenSSL is categorized as a low severity issue primarily because it requires specific conditions to exploit and doesn\u0027t directly result in a full Denial of Service (DoS). While the excessive time spent in DH key generation or verification could potentially cause delays, the impact is mitigated by the fact that it requires untrusted sources supplying large Q parameter values. Additionally, the OpenSSL SSL/TLS implementation remains unaffected, limiting the scope of potential attacks. Moreover, there are inherent limits on key length, which further restrict the potential for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-5678"
},
{
"category": "external",
"summary": "RHBZ#2248616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248616"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-5678",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5678"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678"
},
{
"category": "external",
"summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055"
},
{
"category": "external",
"summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c"
},
{
"category": "external",
"summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017"
},
{
"category": "external",
"summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
"url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20231106.txt",
"url": "https://www.openssl.org/news/secadv/20231106.txt"
}
],
"release_date": "2023-10-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow"
},
{
"cve": "CVE-2023-6129",
"cwe": {
"id": "CWE-328",
"name": "Use of Weak Hash"
},
"discovery_date": "2024-01-10T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2257571"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in in the POLY1305 MAC (message authentication code) implementation in OpenSSL, affecting applications running on PowerPC CPU-based platforms that utilize vector instructions, and has the potential to corrupt the internal state of these applications. If an attacker can manipulate the utilization of the POLY1305 MAC algorithm, it may lead to the corruption of the application state, resulting in various application-dependent consequences, often resulting in a crash and leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is categorized as having a Low severity due to the limited scope of its potential impact and the specific conditions required for exploitation. The vulnerability arises in the POLY1305 MAC implementation within OpenSSL on PowerPC CPUs, affecting newer processors supporting PowerISA 2.07 instructions. The issue involves the restoration of vector registers in a different order than they are saved, potentially corrupting application state upon return to the caller. The impact varies, contingent on the application\u0027s reliance on non-volatile XMM registers, ranging from incorrect calculations to potential denial of service. However, the practical exploitation of this vulnerability requires an attacker to influence the use of the POLY1305 MAC algorithm. Given the specific conditions needed for exploitation and the absence of concrete instances of affected applications, the overall risk is assessed as low. Additionally, the severity is tempered by the assumption that the most likely outcome is limited to incorrect results in application-dependent calculations or crashes, rather than enabling a full compromise of the application process.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-6129"
},
{
"category": "external",
"summary": "RHBZ#2257571",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257571"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-6129",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6129"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6129",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6129"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20240109.txt",
"url": "https://www.openssl.org/news/secadv/20240109.txt"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2024/01/09/1",
"url": "https://www.openwall.com/lists/oss-security/2024/01/09/1"
}
],
"release_date": "2024-01-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC"
},
{
"cve": "CVE-2023-6237",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-01-15T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2258502"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When the EVP_PKEY_public_check() function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large prime, this computation takes a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Excessive time spent checking invalid RSA public keys",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security rates the severity of this flaw as determined by the upstream OpenSSL security team.\n\nThe marked moderate issue in OpenSSL involves a flaw in the EVP_PKEY_public_check() function used for RSA public keys. When verifying keys, the computation to confirm the composite nature of the RSA modulus may take an extended time if the modulus is a large prime. This vulnerability could be exploited for a Denial of Service attack in applications using this function with RSA keys from untrusted sources. The severity is moderate as it requires specific conditions for exploitation and may not pose an immediate widespread threat.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-6237"
},
{
"category": "external",
"summary": "RHBZ#2258502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2258502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-6237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-6237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-6237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6237"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20240115.txt",
"url": "https://www.openssl.org/news/secadv/20240115.txt"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2024/01/15/2",
"url": "https://www.openwall.com/lists/oss-security/2024/01/15/2"
}
],
"release_date": "2024-01-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: Excessive time spent checking invalid RSA public keys"
},
{
"cve": "CVE-2024-0727",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2024-01-23T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2259944"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the \"type\" is a valid value, which can lead to a null dereference error that may cause a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: denial of service via null dereference",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is classified as low severity. This is a result of a lack of proper validation in OpenSSL\u0027s handling of PKCS12 files. This vulnerability results in a potential Denial of Service scenario wherein maliciously crafted PKCS12 files may cause OpenSSL to crash due to a NULL pointer dereference. However, the impact of this issue is reduced by the fact that exploitation requires processing PKCS12 files from untrusted sources using specific OpenSSL APIs, such as PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes(), and PKCS12_newpass(). Furthermore, while a similar issue was addressed in SMIME_write_PKCS7(), its relevance is diminished as it pertains to writing data rather than parsing, hence not considered security significant. The risk of this vulnerability is limited as Red Hat offerings do not utilize images from untrusted sources by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"known_not_affected": [
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-0727"
},
{
"category": "external",
"summary": "RHBZ#2259944",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259944"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-0727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0727"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/pull/23362",
"url": "https://github.com/openssl/openssl/pull/23362"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20240125.txt",
"url": "https://www.openssl.org/news/secadv/20240125.txt"
}
],
"release_date": "2024-01-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-04-30T10:36:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:2447"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
"BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
"BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
"BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
"BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "openssl: denial of service via null dereference"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.