DeutschShown in its original language — a full translation is planned for a future version.
OpenSSL: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
view advisory published 2023-03-28
Ein Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0466US | medium5.3 | — | ||
The function X509_VERIFY_PARAM_add0_policy() is documented to
implicitly enable the certificate policy check when doing certificate
verification. However the implementation of the… | ||||
| CVE-2023-0465US | medium5.3 | — | ||
Applications that use a non-default option when verifying certificates may be
vulnerable to an attack from a malicious CA to circumvent certain checks.
Invalid certificate policie… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:3722 vom 2023-06-21external
- Red Hat Security Advisory RHSA-2023:3925 vom 2023-07-06external
- Red Hat Security Advisory RHSA-2023:4091 vom 2023-07-20external
- Red Hat Security Advisory RHSA-2023:7622 vom 2023-12-07external
- Red Hat Security Advisory RHSA-2023:7623 vom 2023-12-07external
- Red Hat Security Advisory RHSA-2023:7625 vom 2023-12-07external
- Red Hat Security Advisory RHSA-2023:7626 vom 2023-12-07external
- IBM Security Bulletin 7031625 vom 2023-09-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan