[USN-6435-1] OpenSSL vulnerabilities

Severity Medium

Affected Packages 8

CVEs 2

OpenSSL could be made to consume resources and cause long delays if it processed certain input.

It was discovered that OpenSSL incorrectly handled excessively large
Diffie-Hellman parameters. An attacker could possibly use this issue
to cause a denial of service. (CVE-2023-3446)

Bernd Edlinger discovered that OpenSSL incorrectly handled excessively
large Diffie-Hellman parameters. An attacker could possibly use this
issue to cause a denial of service. (CVE-2023-3817)

Package	Affected Version
pkg:deb/ubuntu/openssl?distro=xenial	< 1.0.2g-1ubuntu4.20+esm10
pkg:deb/ubuntu/openssl?distro=bionic	< 1.1.1-1ubuntu2.1~18.04.23+esm3
pkg:deb/ubuntu/libssl1.1?distro=bionic	< 1.1.1-1ubuntu2.1~18.04.23+esm3
pkg:deb/ubuntu/libssl1.0.0?distro=xenial	< 1.0.2g-1ubuntu4.20+esm10
pkg:deb/ubuntu/libssl-doc?distro=xenial	< 1.0.2g-1ubuntu4.20+esm10
pkg:deb/ubuntu/libssl-doc?distro=bionic	< 1.1.1-1ubuntu2.1~18.04.23+esm3
pkg:deb/ubuntu/libssl-dev?distro=xenial	< 1.0.2g-1ubuntu4.20+esm10
pkg:deb/ubuntu/libssl-dev?distro=bionic	< 1.1.1-1ubuntu2.1~18.04.23+esm3

ID

USN-6435-1

Severity

medium

Severity from

CVE-2023-3446

URL

https://ubuntu.com/security/notices/USN-6435-1

Published

2023-10-18T19:51:24
(11 months ago)

Modified

2023-10-18T19:51:24
(11 months ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/openssl?distro=xenial	ubuntu	openssl	< 1.0.2g-1ubuntu4.20+esm10	xenial
Affected	pkg:deb/ubuntu/openssl?distro=bionic	ubuntu	openssl	< 1.1.1-1ubuntu2.1~18.04.23+esm3	bionic
Affected	pkg:deb/ubuntu/libssl1.1?distro=bionic	ubuntu	libssl1.1	< 1.1.1-1ubuntu2.1~18.04.23+esm3	bionic
Affected	pkg:deb/ubuntu/libssl1.0.0?distro=xenial	ubuntu	libssl1.0.0	< 1.0.2g-1ubuntu4.20+esm10	xenial
Affected	pkg:deb/ubuntu/libssl-doc?distro=xenial	ubuntu	libssl-doc	< 1.0.2g-1ubuntu4.20+esm10	xenial
Affected	pkg:deb/ubuntu/libssl-doc?distro=bionic	ubuntu	libssl-doc	< 1.1.1-1ubuntu2.1~18.04.23+esm3	bionic
Affected	pkg:deb/ubuntu/libssl-dev?distro=xenial	ubuntu	libssl-dev	< 1.0.2g-1ubuntu4.20+esm10	xenial
Affected	pkg:deb/ubuntu/libssl-dev?distro=bionic	ubuntu	libssl-dev	< 1.1.1-1ubuntu2.1~18.04.23+esm3	bionic

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date