CVE-2023-6237

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-6237
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-6237.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-6237
Downstream
ALPINE (1)
AZL (7)
BELL (1)
CGA (8)
CLEANSTART (2)
CLSA (1)
DEBIAN (1)
JLSEC (1)
MGASA (3)
openSUSE (1)
RHSA (2)
RLSA (1)
SUSE (2)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (2)
Published
2024-04-25T06:27:26Z
Modified
2026-09-16T08:19:05Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Excessive time spent checking invalid RSA public keys
Details

Issue summary: Checking excessively long invalid RSA public keys may take a long time.

Impact summary: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may lead to a Denial of Service.

When function EVP_PKEY_public_check() is called on RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is an overly large prime, then this computation would take a long time.

An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.

The function EVP_PKEY_public_check() is not called from other OpenSSL functions however it is called from the OpenSSL pkey command line application. For that reason that application is also vulnerable if used with the '-pubin' and '-check' options on untrusted data.

The OpenSSL SSL/TLS implementation is not affected by this issue.

The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

Database specific 
{
    "cna_assigner": "openssl",
    "cwe_ids": [
        "CWE-606"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6237.json"
}
References

Affected packages

Git / github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
89cd17a031e022211684eb7eb41190cf1910f9fa
Introduced
a92271e03a8d0dee507b6f1e7f49512568b2c7ad
Introduced
cf2877791ce7508684109664f467c9e40987692f
Fixed
85cf92f55d9e2ac5aacf92bedd33fb890b9f8b4c
Fixed
99e6624ebb8a5943ab9699ed4ab221e8b29a31dd
Fixed
a7e992847de83aa36be0c399c89db3fb827b0be2
Fixed
0b0f7abfb37350794a4b8960fafc292cd5d1b84d
Fixed
18c02492138d1eb8b6548cb26e7b625fb2414a2a
Fixed
a830f551557d3d66a84bbb18a5b889c640c36294
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.0.13"
        },
        {
            "introduced": "3.1.0"
        },
        {
            "fixed": "3.1.5"
        },
        {
            "introduced": "3.2.0"
        },
        {
            "fixed": "3.2.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

openssl-3.*
openssl-3.0.0
openssl-3.0.1
openssl-3.0.10
openssl-3.0.11
openssl-3.0.12
openssl-3.0.2
openssl-3.0.3
openssl-3.0.4
openssl-3.0.5
openssl-3.0.6
openssl-3.0.7
openssl-3.0.8
openssl-3.0.9
openssl-3.1.0
openssl-3.1.1
openssl-3.1.2
openssl-3.1.3
openssl-3.1.4
openssl-3.2.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-6237.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "36262343259786368621085857695218833956",
            "length": 1258
        },
        "id": "CVE-2023-6237-07b4356d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c",
            "function": "ossl_rsa_sp800_56b_check_public"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "5799985256469090440161975918621279176",
                "231956326038171660204156138522531293340",
                "72751756268789884712810101003534450503",
                "314070120765545521861021195160721661288",
                "163275361520424784336712083888861921840",
                "80433659035868977858238900915029720241",
                "55330043341397734539339972248704545042",
                "79386981174192347288537193082013598235"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-6237-3d282511",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "5799985256469090440161975918621279176",
                "231956326038171660204156138522531293340",
                "72751756268789884712810101003534450503",
                "314070120765545521861021195160721661288",
                "163275361520424784336712083888861921840",
                "80433659035868977858238900915029720241",
                "55330043341397734539339972248704545042",
                "79386981174192347288537193082013598235"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-6237-7dd742ac",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "36262343259786368621085857695218833956",
            "length": 1258
        },
        "id": "CVE-2023-6237-8aca94dc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c",
            "function": "ossl_rsa_sp800_56b_check_public"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "5799985256469090440161975918621279176",
                "231956326038171660204156138522531293340",
                "72751756268789884712810101003534450503",
                "314070120765545521861021195160721661288",
                "163275361520424784336712083888861921840",
                "80433659035868977858238900915029720241",
                "55330043341397734539339972248704545042",
                "79386981174192347288537193082013598235"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-6237-98851d99",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "36262343259786368621085857695218833956",
            "length": 1258
        },
        "id": "CVE-2023-6237-e95520da",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294",
        "target": {
            "file": "crypto/rsa/rsa_sp800_56b_check.c",
            "function": "ossl_rsa_sp800_56b_check_public"
        }
    }
]
vanir_signatures_modified 
"2026-09-16T08:19:05Z"