Skip to content
fr Sign in
Not rated

CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509…

Description

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Affected products and versions

Product Affected versions Fixed in
OpenSSL 3.1 3.1.0 → < 3.1.1 3.1.1
OpenSSL 3.0 3.0.0 → < 3.0.9 3.0.9
OpenSSL 1.1 earliest → < 1.1.1u 1.1.1u
OpenSSL 1.0 earliest → < 1.0.2zh 1.0.2zh
BFCClient 2.17 earliest → < 2.17 2.17
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1 1.1
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of OpenSSL

The 141 CVEs of OpenSSL →
CVE-2026-84784 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a… Not rated CVE-2026-84783 Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached… Not rated CVE-2026-84782 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended… Not rated CVE-2026-77696 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing… Not rated
Track this CVE