David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. (CVE-2023-0286)
Corey Bonnell discovered that OpenSSL incorrectly handled X.509 certificate verification. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-4203)
Hubert Kario discovered that OpenSSL had a timing based side channel in the OpenSSL RSA Decryption implementation. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2022-4304)
Dawei Wang discovered that OpenSSL incorrectly handled parsing certain PEM data. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2022-4450)
Octavio Galland and Marcel Böhme discovered that OpenSSL incorrectly handled streaming ASN.1 data. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-0215)
Marc Schönefeld discovered that OpenSSL incorrectly handled malformed PKCS7 data. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-0216)
Kurt Roeckx discovered that OpenSSL incorrectly handled validating certain DSA public keys. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-0217)
Hubert Kario and Dmitry Belyavsky discovered that OpenSSL incorrectly validated certain signatures. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2023-0401)
{ "availability": "No subscription required", "binaries": [ { "libssl-doc": "1.1.1-1ubuntu2.1~18.04.21", "libssl-dev": "1.1.1-1ubuntu2.1~18.04.21", "libssl1.1-dbgsym": "1.1.1-1ubuntu2.1~18.04.21", "libssl1.1-udeb": "1.1.1-1ubuntu2.1~18.04.21", "libssl1.1": "1.1.1-1ubuntu2.1~18.04.21", "openssl-dbgsym": "1.1.1-1ubuntu2.1~18.04.21", "libcrypto1.1-udeb": "1.1.1-1ubuntu2.1~18.04.21", "openssl": "1.1.1-1ubuntu2.1~18.04.21" } ] }
{ "availability": "No subscription required", "binaries": [ { "libssl-doc": "1.1.1f-1ubuntu2.17", "libssl-dev": "1.1.1f-1ubuntu2.17", "libssl1.1-dbgsym": "1.1.1f-1ubuntu2.17", "libssl1.1-udeb": "1.1.1f-1ubuntu2.17", "libssl1.1": "1.1.1f-1ubuntu2.17", "openssl-dbgsym": "1.1.1f-1ubuntu2.17", "libcrypto1.1-udeb": "1.1.1f-1ubuntu2.17", "openssl": "1.1.1f-1ubuntu2.17" } ] }