CVE-2023-0286

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING.

When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.

Database specific

{
    "cna_assigner": "openssl",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0286.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "3.0.0"
                },
                {
                    "fixed": "3.0.8"
                },
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1t"
                },
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2zg"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type

GIT

Repo

https://github.com/openssl/openssl

Events

Introduced

7b560c174dcd569795f5be66e0c091d1be440614

Fixed

7b560c174dcd569795f5be66e0c091d1be440614

Introduced

d82e959e621a3d597f1e0d50ff8c2d8b96915fd7

Fixed

d82e959e621a3d597f1e0d50ff8c2d8b96915fd7

Introduced

d8dd2312cb78029470effab221ec5996892adbbe

Fixed

31157bc0b46e04227b8468d3e6915e4d0332777c

Database specific

Show details

{
    "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.2"
        },
        {
            "fixed": "1.0.2zg"
        },
        {
            "introduced": "1.1.1"
        },
        {
            "fixed": "1.1.1t"
        },
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.0.8"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0286.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "227289184607936123042847166539399605026",
                "301804664818318515002029985544958406393",
                "281640860276829317870241943565090034590",
                "42300937228587669491448957702606411256",
                "327697935414145030383442306507222077314"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-0286-0f1fc87e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/d82e959e621a3d597f1e0d50ff8c2d8b96915fd7",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "19539661553841879622633679962680969091",
                "133036846096550422788696208295706083216",
                "2879305035241628928916436793475403947",
                "58235332148236106609765445750408197531",
                "276728337026316762965321377235658470601",
                "243010485815873192586173884473010295078",
                "175492772248432625447345810599597002812",
                "150097312491038494195658212970374645525"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-0286-425a4aad",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/7b560c174dcd569795f5be66e0c091d1be440614",
        "target": {
            "file": "crypto/opensslv.h"
        }
    }
]

vanir_signatures_modified

"2026-09-09T08:18:47Z"