Test Kennung:	1.3.6.1.4.1.25623.1.0.150799
Kategorie:	Denial of Service
Titel:	OpenSSL DoS Vulnerability (20230731) - Linux
Zusammenfassung:	OpenSSL is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Checking excessively long DH keys or parameters may be very slow. Vulnerability Impact: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. Affected Software/OS: OpenSSL version 1.0.2, 1.1.1, 3.0 and 3.1. Solution: Update to version 1.0.2zi, 1.1.1v, 3.0.10, 3.1.2 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-3817 http://seclists.org/fulldisclosure/2023/Jul/43 https://security.gentoo.org/glsa/202402-08 1.0.2zi patch (premium) https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644 1.1.1v git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5 3.0.10 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f 3.1.2 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5 OpenSSL Advisory https://www.openssl.org/news/secadv/20230731.txt https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html http://www.openwall.com/lists/oss-security/2023/07/31/1 http://www.openwall.com/lists/oss-security/2023/09/22/11 http://www.openwall.com/lists/oss-security/2023/09/22/9 http://www.openwall.com/lists/oss-security/2023/11/06/2
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.