A security vulnerability has been identified in all supported versions
of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems.
Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-develUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl | Jun 27, 2023 | Mar 22, 2023 |
| Alpine Linux | — | Upgrade openssl3Upgrade openssl1.1-compatUpgrade openssl | Mar 26, 2024 | Mar 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openssl-perlUpgrade openssl-develUpgrade edk2-ovmfUpgrade openssl-debuginfoUpgrade edk2-tools-pythonUpgrade edk2-aarch64Upgrade openssl-snapsafeUpgrade openssl11-staticUpgrade openssl-libsUpgrade openssl11Upgrade openssl11-debuginfoUpgrade openssl-snapsafe-perlUpgrade openssl-snapsafe-develUpgrade openssl-staticUpgrade openssl-snapsafe-debuginfoUpgrade openssl11-libsUpgrade openssl11-develUpgrade edk2-toolsUpgrade openssl-snapsafe-libsUpgrade openssl-snapsafe-staticUpgrade edk2-tools-docUpgrade edk2-debuginfoUpgrade openssl | May 17, 2023 | Mar 22, 2023 |
| Amazon_linux | — | Upgrade openssl | Jun 9, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade openssl-debugsourceUpgrade openssl-libs-debuginfoUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl-devel | Feb 17, 2025 | Mar 22, 2023 |
| Centos_linux | — | Upgrade openssl-develUpgrade openssl-libs-debuginfoUpgrade openssl-perlUpgrade openssl-debugsourceUpgrade openssl-debuginfoUpgrade openssl-libsUpgrade openssl | Jun 22, 2023 | Mar 22, 2023 |
| Debian | — | Upgrade openssl | Jun 2, 2023 | Mar 22, 2023 |
| Dell Poweredge Dsa2024082 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Feb 20, 2024 |
| F5 Big Ip | — | — | Dec 8, 2023 | Mar 22, 2023 |
| Freebsd | — | Upgrade python310Upgrade openssl-quicUpgrade python38Upgrade virtualbox-oseUpgrade python311Upgrade opensslUpgrade python37Upgrade python39Upgrade openssl30Upgrade openssl31 | Jun 8, 2023 | Jun 8, 2023 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Feb 5, 2024 | Mar 22, 2023 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Jun 5, 2024 | Mar 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade shim | May 9, 2023 | Mar 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade shim | Jan 10, 2024 | Mar 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-libsUpgrade openssl-devel | Jun 9, 2023 | Mar 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade shim | May 10, 2023 | Mar 22, 2023 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory39 | Sep 12, 2023 | Mar 22, 2023 |
| Oracle_linux | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade opensslUpgrade openssl-devel | Jun 22, 2023 | Mar 22, 2023 |
| Rapid7 Insightagent | — | Upgrade Rapid7 Insight Agent to version 4.0.6.14 | Mar 19, 2024 | Mar 22, 2023 |
| Redhat_linux | — | Upgrade openssl-debuginfoNo solution existsUpgrade openssl-debugsourceUpgrade openssl-develUpgrade openssl-libs-debuginfoUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl | Jun 22, 2023 | Mar 22, 2023 |
| Rocky_linux | — | Upgrade openssl-debugsourceUpgrade openssl-develUpgrade openssl-fips-providerUpgrade openssl-debuginfoUpgrade openssl-fips-provider-debuginfoUpgrade openssl-libs-debuginfoUpgrade openssl-fips-provider-debugsourceUpgrade opensslUpgrade openssl-perlUpgrade openssl-libs | Jun 17, 2024 | Mar 22, 2023 |
| Suse | — | Upgrade libopenssl1_0_0-steam-32bitUpgrade libopenssl3Upgrade libopenssl1_0_0Upgrade libopenssl-1_0_0-develUpgrade libopenssl1_1Upgrade libopenssl1_0_0-32bitUpgrade libopenssl-1_0_0-devel-32bitUpgrade libopenssl0_9_8Upgrade opensslUpgrade libopenssl0_9_8-hmacUpgrade openssl-1_1-docUpgrade libopenssl1_1-hmac-32bitUpgrade openssl1-docUpgrade openssl-1_0_0Upgrade openssl-1_0_0-cavsUpgrade libopenssl3-32bitUpgrade libopenssl1_1-hmacUpgrade libopenssl1_0_0-hmac-32bitUpgrade openssl-1_1Upgrade openssl-docUpgrade openssl-3-docUpgrade libopenssl0_9_8-32bitUpgrade openssl1Upgrade libopenssl-1_1-devel-32bitUpgrade libopenssl1_0_0-steamUpgrade libopenssl10Upgrade libopenssl-3-devel-32bitUpgrade libopenssl1_1-32bitUpgrade libopenssl0_9_8-hmac-32bitUpgrade libopenssl-develUpgrade openssl-1_0_0-docUpgrade libopenssl-1_1-develUpgrade libopenssl-3-develUpgrade libopenssl1_0_0-hmacUpgrade libopenssl1-develUpgrade openssl-3 | Mar 31, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade libssl1.0.0Upgrade libssl-docUpgrade libssl3Upgrade opensslUpgrade qemu-efiUpgrade qemu-efi-loongarch64Upgrade qemu-efi-aarch64Upgrade ovmf-ia32Upgrade ovmfUpgrade libssl1.0.0 (Ubuntu Pro)Upgrade qemu-efi-armUpgrade libssl1.1Upgrade openssl1.0Upgrade libssl-doc (Ubuntu Pro)Upgrade qemu-efi-riscv64Upgrade openssl (Ubuntu Pro) | May 1, 2023 | Mar 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 22, 2023 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 20, 2025 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub