1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6435-2

[USN-6435-2] OpenSSL vulnerabilities

Severity Medium
Affected Packages 4
CVEs 2
Info Packages Vulnerabilities

OpenSSL could be made to consume resources and cause long delays if it processed certain input.

USN-6435-1 fixed vulnerabilities in OpenSSL. This update
provides the corresponding updates for Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that OpenSSL incorrectly handled excessively large
Diffie-Hellman parameters. An attacker could possibly use this issue
to cause a denial of service. (CVE-2023-3446)

Bernd Edlinger discovered that OpenSSL incorrectly handled excessively
large Diffie-Hellman parameters. An attacker could possibly use this
issue to cause a denial of service. (CVE-2023-3817)

Package Affected Version
pkg:deb/ubuntu/openssl?distro=focal < 1.1.1f-1ubuntu2.20
pkg:deb/ubuntu/libssl1.1?distro=focal < 1.1.1f-1ubuntu2.20
pkg:deb/ubuntu/libssl-doc?distro=focal < 1.1.1f-1ubuntu2.20
pkg:deb/ubuntu/libssl-dev?distro=focal < 1.1.1f-1ubuntu2.20
ID
USN-6435-2
Severity
medium
Severity from
CVE-2023-3446
URL
https://ubuntu.com/security/notices/USN-6435-2
Published
2023-10-25T12:40:20
(10 months ago)
Modified
2023-10-25T12:40:20
(10 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/openssl?distro=focal ubuntu openssl < 1.1.1f-1ubuntu2.20 focal
Affected pkg:deb/ubuntu/libssl1.1?distro=focal ubuntu libssl1.1 < 1.1.1f-1ubuntu2.20 focal
Affected pkg:deb/ubuntu/libssl-doc?distro=focal ubuntu libssl-doc < 1.1.1f-1ubuntu2.20 focal
Affected pkg:deb/ubuntu/libssl-dev?distro=focal ubuntu libssl-dev < 1.1.1f-1ubuntu2.20 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date