PT-2023-33048 · Openssl · Openssl

Publicado 2023-02-09 · Atualizado 2023-02-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description A read buffer overflow can occur in OpenSSL's X.509 verification process, specifically during name constraint checking. This issue arises after the certificate chain has been verified and would require a compromised Certificate Authority (CA). The overflow can cause a client or agent compiled with OpenSSL to crash unexpectedly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

GHSA-PJ34-FPW3-83QJ

Produtos afetados

Openssl

Referências · 5

• https://github.com/bottlerocket-os/bottlerocket-update-operator/releases/tag/v1.1.0 · Nota
• https://github.com/bottlerocket-os/bottlerocket-update-operator · Nota
• https://github.com/bottlerocket-os/bottlerocket-update-operator/security/advisories/GHSA-pj34-fpw3-83qj · Nota
• https://openssl.org/news/secadv/20230207.txt · Nota
• https://osv.dev/vulnerability/GHSA-pj34-fpw3-83qj · Aviso do Fabricante