PT-2023-33048 · Openssl · Openssl

Published 2023-02-09 · Updated 2023-02-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OpenSSL (affected versions not specified)

Description A read buffer overflow can occur in OpenSSL's X.509 verification process, specifically during name constraint checking. This issue arises after the certificate chain has been verified and would require a compromised Certificate Authority (CA). The overflow can cause a client or agent compiled with OpenSSL to crash unexpectedly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-PJ34-FPW3-83QJ

Affected Products

Openssl

References · 5

• https://osv.dev/vulnerability/GHSA-pj34-fpw3-83qj · Vendor Advisory
• https://github.com/bottlerocket-os/bottlerocket-update-operator/releases/tag/v1.1.0 · Note
• https://github.com/bottlerocket-os/bottlerocket-update-operator · Note
• https://github.com/bottlerocket-os/bottlerocket-update-operator/security/advisories/GHSA-pj34-fpw3-83qj · Note
• https://openssl.org/news/secadv/20230207.txt · Note