CVE-2023-0286
CVE-2023-0286 · X.400 address type confusion in X.509 GeneralName
This page contains facts from public vulnerability sources. Check the original advisory before updating.
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.
CVSS 7.4 · High · EPSS 71.2% · Fix available
- Published
- Updated
Stack: system · python · network
Affected products and versions
openssl
- Versions
- ≥ 3.0.0, < 3.0.8: Affected (semver)
- ≥ 1.1.1, < 1.1.1t: Affected (custom)
- ≥ 1.0.2, < 1.0.2zg: Affected (custom)
Update to 1.0.2zg; Update to 1.1.1t; Update to 3.0.8
openssl Debian:12
- Affected ranges
- ECOSYSTEM: < 3.0.8-1
Update to 3.0.8-1
openssl Debian:13
- Affected ranges
- ECOSYSTEM: < 3.0.8-1
Update to 3.0.8-1
openssl Debian:14
- Affected ranges
- ECOSYSTEM: < 3.0.8-1
Update to 3.0.8-1
cryptography PyPI
- Versions
- 0.8.1
- 0.8.2
- 0.9
- 0.9.1
- 0.9.2
- 0.9.3
- 1.0
- 1.0.1
- 1.0.2
- 1.1
- 1.1.1
- 1.1.2
- 1.2
- 1.2.1
- 1.2.2
- 1.2.3
- 1.3
- 1.3.1
- 1.3.2
- 1.3.3
- 1.3.4
- 1.4
- 1.5
- 1.5.1
- 1.5.2
- 1.5.3
- 1.6
- 1.7
- 1.7.1
- 1.7.2
- 1.8
- 1.8.1
- 1.8.2
- 1.9
- 2.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.1
- 2.1.1
- 2.1.2
- 2.1.3
- 2.1.4
- 2.2
- 2.2.1
- 2.2.2
- 2.3
- 2.3.1
- 2.4
- 2.4.1
- 2.4.2
- 2.5
- 2.6
- 2.6.1
- 2.7
- 2.8
- 2.9
- 2.9.1
- 2.9.2
- 3.0
- 3.1
- 3.1.1
- 3.2
- 3.2.1
- 3.3
- 3.3.1
- 3.3.2
- 3.4
- 3.4.1
- 3.4.2
- 3.4.3
- 3.4.4
- 3.4.5
- 3.4.6
- 3.4.7
- 3.4.8
- 35.0.0
- 36.0.0
- 36.0.1
- 36.0.2
- 37.0.0
- 37.0.1
- 37.0.2
- 37.0.3
- 37.0.4
- 38.0.0
- 38.0.1
- 38.0.2
- 38.0.3
- 38.0.4
- 39.0.0
- Affected ranges
- ECOSYSTEM: ≥ 0.8.1, < 39.0.1
Update to 39.0.1
openssl-src crates.io
- Affected ranges
- SEMVER: < 111.25.0
Update to 111.25.0
openssl-src crates.io
- Affected ranges
- SEMVER: ≥ 300.0.0, < 300.0.12
Update to 300.0.12
openssl Ubuntu:Pro:14.04:LTS
- Versions
- 1.0.1e-3ubuntu1
- 1.0.1e-4ubuntu1
- 1.0.1e-4ubuntu2
- 1.0.1e-4ubuntu3
- 1.0.1e-4ubuntu4
- 1.0.1f-1ubuntu1
- 1.0.1f-1ubuntu2
- 1.0.1f-1ubuntu2.1
- 1.0.1f-1ubuntu2.2
- 1.0.1f-1ubuntu2.3
- 1.0.1f-1ubuntu2.4
- 1.0.1f-1ubuntu2.5
- 1.0.1f-1ubuntu2.7
- 1.0.1f-1ubuntu2.8
- 1.0.1f-1ubuntu2.11
- 1.0.1f-1ubuntu2.12
- 1.0.1f-1ubuntu2.15
- 1.0.1f-1ubuntu2.16
- 1.0.1f-1ubuntu2.17
- 1.0.1f-1ubuntu2.18
- 1.0.1f-1ubuntu2.19
- 1.0.1f-1ubuntu2.20
- 1.0.1f-1ubuntu2.21
- 1.0.1f-1ubuntu2.22
- 1.0.1f-1ubuntu2.23
- 1.0.1f-1ubuntu2.24
- 1.0.1f-1ubuntu2.25
- 1.0.1f-1ubuntu2.26
- 1.0.1f-1ubuntu2.27
- 1.0.1f-1ubuntu2.27+esm1
- 1.0.1f-1ubuntu2.27+esm2
- 1.0.1f-1ubuntu2.27+esm3
- 1.0.1f-1ubuntu2.27+esm4
- 1.0.1f-1ubuntu2.27+esm5
- Affected ranges
- ECOSYSTEM: < 1.0.1f-1ubuntu2.27+esm6
Update to 1.0.1f-1ubuntu2.27+esm6
openssl Ubuntu:Pro:16.04:LTS
- Versions
- 1.0.2d-0ubuntu1
- 1.0.2d-0ubuntu2
- 1.0.2e-1ubuntu1
- 1.0.2f-2ubuntu1
- 1.0.2g-1ubuntu2
- 1.0.2g-1ubuntu3
- 1.0.2g-1ubuntu4
- 1.0.2g-1ubuntu4.1
- 1.0.2g-1ubuntu4.2
- 1.0.2g-1ubuntu4.4
- 1.0.2g-1ubuntu4.5
- 1.0.2g-1ubuntu4.6
- 1.0.2g-1ubuntu4.8
- 1.0.2g-1ubuntu4.9
- 1.0.2g-1ubuntu4.10
- 1.0.2g-1ubuntu4.11
- 1.0.2g-1ubuntu4.12
- 1.0.2g-1ubuntu4.13
- 1.0.2g-1ubuntu4.14
- 1.0.2g-1ubuntu4.15
- 1.0.2g-1ubuntu4.16
- 1.0.2g-1ubuntu4.17
- 1.0.2g-1ubuntu4.18
- 1.0.2g-1ubuntu4.19
- 1.0.2g-1ubuntu4.20
- 1.0.2g-1ubuntu4.20+esm1
- 1.0.2g-1ubuntu4.20+esm2
- 1.0.2g-1ubuntu4.20+esm3
- 1.0.2g-1ubuntu4.20+esm4
- 1.0.2g-1ubuntu4.20+esm5
- Affected ranges
- ECOSYSTEM: < 1.0.2g-1ubuntu4.20+esm6
Update to 1.0.2g-1ubuntu4.20+esm6
edk2 Ubuntu:Pro:16.04:LTS
- Versions
- 0~20150106.5c2d456b-2
- 0~20160104.c2a892d7-1
- 0~20160408.ffea0a2c-2
- 0~20160408.ffea0a2c-2ubuntu0.1
- 0~20160408.ffea0a2c-2ubuntu0.2
- 0~20160408.ffea0a2c-2ubuntu0.2+esm1
- 0~20160408.ffea0a2c-2ubuntu0.2+esm3
- 0~20160408.ffea0a2c-2ubuntu0.2+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:Pro:FIPS-updates:16.04:LTS
- Versions
- 1.0.2g-1ubuntu4.fips.4.9.1
- 1.0.2g-1ubuntu4.fips.4.13.1
- 1.0.2g-1ubuntu4.fips.4.15.1
- 1.0.2g-1ubuntu4.fips.4.16.1
- 1.0.2g-1ubuntu4.fips.4.17.1
- 1.0.2g-1ubuntu4.fips.4.18.1
- 1.0.2g-1ubuntu4.fips.4.19.3
- 1.0.2g-1ubuntu4.fips.4.20.1
- 1.0.2g-1ubuntu4.fips.4.20.2
- 1.0.2g-1ubuntu4.fips.4.20.3
- Affected ranges
- ECOSYSTEM: < 1.0.2g-1ubuntu4.fips.4.20.6
Update to 1.0.2g-1ubuntu4.fips.4.20.6
openssl Ubuntu:Pro:FIPS:16.04:LTS
- Versions
- 1.0.2g-1ubuntu4.fips.4.6~ppa1
- 1.0.2g-1ubuntu4.fips.4.6~ppa2
- 1.0.2g-1ubuntu4.fips.4.6~ppa3
- 1.0.2g-1ubuntu4.fips.4.6
- 1.0.2g-1ubuntu4.fips.4.6.1
- 1.0.2g-1ubuntu4.fips.4.6.2
- 1.0.2g-1ubuntu4.fips.4.6.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:18.04:LTS
- Versions
- 1.0.2g-1ubuntu13
- 1.0.2g-1ubuntu14
- 1.0.2n-1ubuntu1
- 1.1.0g-2ubuntu1
- 1.1.0g-2ubuntu2
- 1.1.0g-2ubuntu3
- 1.1.0g-2ubuntu4
- 1.1.0g-2ubuntu4.1
- 1.1.0g-2ubuntu4.3
- 1.1.1-1ubuntu2.1~18.04.1
- 1.1.1-1ubuntu2.1~18.04.2
- 1.1.1-1ubuntu2.1~18.04.3
- 1.1.1-1ubuntu2.1~18.04.4
- 1.1.1-1ubuntu2.1~18.04.5
- 1.1.1-1ubuntu2.1~18.04.6
- 1.1.1-1ubuntu2.1~18.04.7
- 1.1.1-1ubuntu2.1~18.04.8
- 1.1.1-1ubuntu2.1~18.04.9
- 1.1.1-1ubuntu2.1~18.04.10
- 1.1.1-1ubuntu2.1~18.04.13
- 1.1.1-1ubuntu2.1~18.04.14
- 1.1.1-1ubuntu2.1~18.04.15
- 1.1.1-1ubuntu2.1~18.04.17
- 1.1.1-1ubuntu2.1~18.04.19
- 1.1.1-1ubuntu2.1~18.04.20
- Affected ranges
- ECOSYSTEM: < 1.1.1-1ubuntu2.1~18.04.21
Update to 1.1.1-1ubuntu2.1~18.04.21
openssl1.0 Ubuntu:18.04:LTS
- Versions
- 1.0.2n-1ubuntu2
- 1.0.2n-1ubuntu3
- 1.0.2n-1ubuntu4
- 1.0.2n-1ubuntu5
- 1.0.2n-1ubuntu5.1
- 1.0.2n-1ubuntu5.2
- 1.0.2n-1ubuntu5.3
- 1.0.2n-1ubuntu5.4
- 1.0.2n-1ubuntu5.5
- 1.0.2n-1ubuntu5.6
- 1.0.2n-1ubuntu5.7
- 1.0.2n-1ubuntu5.8
- 1.0.2n-1ubuntu5.9
- 1.0.2n-1ubuntu5.10
- Affected ranges
- ECOSYSTEM: < 1.0.2n-1ubuntu5.11
Update to 1.0.2n-1ubuntu5.11
edk2 Ubuntu:Pro:18.04:LTS
- Versions
- 0~20170911.5dfba97c-1
- 0~20171010.234dbcef-1
- 0~20171027.76fd5a66-1
- 0~20171205.a9212288-1
- 0~20180105.0bc94c74-1
- 0~20180205.c0d9813c-1
- 0~20180205.c0d9813c-2
- 0~20180205.c0d9813c-2ubuntu0.1
- 0~20180205.c0d9813c-2ubuntu0.2
- 0~20180205.c0d9813c-2ubuntu0.3
- 0~20180205.c0d9813c-2ubuntu0.3+esm1
- 0~20180205.c0d9813c-2ubuntu0.3+esm2
- 0~20180205.c0d9813c-2ubuntu0.3+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:Pro:FIPS-updates:18.04:LTS
- Versions
- 1.1.1-1ubuntu2.fips.2.1~18.04.5.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.6.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.7.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.9.3
- 1.1.1-1ubuntu2.fips.2.1~18.04.13.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.15
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- 1.1.1-1ubuntu2.fips.2.1~18.04.17
- 1.1.1-1ubuntu2.fips.2.1~18.04.20
- Affected ranges
- ECOSYSTEM: < 1.1.1-1ubuntu2.fips.2.1~18.04.21
Update to 1.1.1-1ubuntu2.fips.2.1~18.04.21
openssl Ubuntu:Pro:FIPS:18.04:LTS
- Versions
- 1.1.1-1ubuntu2.fips.2.1~18.04.3.1
- 1.1.1-1ubuntu2.fips.2.1~18.04.15.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:20.04:LTS
- Versions
- 1.1.1c-1ubuntu4
- 1.1.1d-2ubuntu3
- 1.1.1d-2ubuntu6
- 1.1.1f-1ubuntu1
- 1.1.1f-1ubuntu2
- 1.1.1f-1ubuntu2.1
- 1.1.1f-1ubuntu2.2
- 1.1.1f-1ubuntu2.3
- 1.1.1f-1ubuntu2.4
- 1.1.1f-1ubuntu2.5
- 1.1.1f-1ubuntu2.8
- 1.1.1f-1ubuntu2.9
- 1.1.1f-1ubuntu2.10
- 1.1.1f-1ubuntu2.11
- 1.1.1f-1ubuntu2.12
- 1.1.1f-1ubuntu2.13
- 1.1.1f-1ubuntu2.15
- 1.1.1f-1ubuntu2.16
- Affected ranges
- ECOSYSTEM: < 1.1.1f-1ubuntu2.17
Update to 1.1.1f-1ubuntu2.17
edk2 Ubuntu:Pro:20.04:LTS
- Versions
- 0~20190606.20d2e5a1-2ubuntu1
- 0~20190828.37eef910-3
- 0~20190828.37eef910-4
- 0~20191122.bd85bf54-1
- 0~20191122.bd85bf54-1ubuntu1
- 0~20191122.bd85bf54-2
- 0~20191122.bd85bf54-2ubuntu1
- 0~20191122.bd85bf54-2ubuntu2
- 0~20191122.bd85bf54-2ubuntu3
- 0~20191122.bd85bf54-2ubuntu3.1
- 0~20191122.bd85bf54-2ubuntu3.2
- 0~20191122.bd85bf54-2ubuntu3.3
- 0~20191122.bd85bf54-2ubuntu3.4
- 0~20191122.bd85bf54-2ubuntu3.5
- 0~20191122.bd85bf54-2ubuntu3.6
- 0~20191122.bd85bf54-2ubuntu3.6+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssl Ubuntu:Pro:FIPS-updates:20.04:LTS
- Versions
- 1.1.1f-1ubuntu2.fips.7
- 1.1.1f-1ubuntu2.fips.7.2
- 1.1.1f-1ubuntu2.fips.12
- 1.1.1f-1ubuntu2.fips.13
- 1.1.1f-1ubuntu2.fips.13.1
- 1.1.1f-1ubuntu2.fips.16
- Affected ranges
- ECOSYSTEM: < 1.1.1f-1ubuntu2.fips.17
Update to 1.1.1f-1ubuntu2.fips.17
openssl Ubuntu:Pro:FIPS:20.04:LTS
- Versions
- 1.1.1f-1ubuntu2.fips.2.8
- 1.1.1f-1ubuntu2.fips.7.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
edk2 Ubuntu:22.04:LTS
- Versions
- 2021.08~rc0-2
- 2021.08-3
- 2021.11~rc1-1
- 2021.11-1
- 2021.11-2
- 2022.02~rc1-1
- 2022.02~rc1-1ubuntu1
- 2022.02-1
- 2022.02-2
- 2022.02-3
- 2022.02-3ubuntu0.22.04.1
- 2022.02-3ubuntu0.22.04.2
- 2022.02-3ubuntu0.22.04.3
- Affected ranges
- ECOSYSTEM: < 2022.02-3ubuntu0.22.04.4
Update to 2022.02-3ubuntu0.22.04.4
nodejs Ubuntu:22.04:LTS
- Versions
- 12.22.5~dfsg-5ubuntu1
- 12.22.7~dfsg-2ubuntu1
- 12.22.7~dfsg-2ubuntu3
- 12.22.9~dfsg-1ubuntu2
- 12.22.9~dfsg-1ubuntu3
- 12.22.9~dfsg-1ubuntu3.1
- 12.22.9~dfsg-1ubuntu3.2
- Affected ranges
- ECOSYSTEM: < 12.22.9~dfsg-1ubuntu3.3
Update to 12.22.9~dfsg-1ubuntu3.3
openssl Ubuntu:22.04:LTS
- Versions
- 1.1.1l-1ubuntu1
- 3.0.0-1ubuntu1
- 3.0.1-0ubuntu1
- 3.0.2-0ubuntu1
- 3.0.2-0ubuntu1.1
- 3.0.2-0ubuntu1.2
- 3.0.2-0ubuntu1.4
- 3.0.2-0ubuntu1.5
- 3.0.2-0ubuntu1.6
- 3.0.2-0ubuntu1.7
- Affected ranges
- ECOSYSTEM: < 3.0.2-0ubuntu1.8
Update to 3.0.2-0ubuntu1.8
Original sources
- https://www.openssl.org/news/secadv/20230207.txt
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
- https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
- https://security.gentoo.org/glsa/202402-08
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
- https://cert-portal.siemens.com/productcert/html/ssa-203374.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-561322.html
- https://cert-portal.siemens.com/productcert/html/ssa-264815.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-943925.html
- https://cert-portal.siemens.com/productcert/html/ssa-455250.html
- https://cert-portal.siemens.com/productcert/html/ssa-556635.html
- https://cert-portal.siemens.com/productcert/html/ssa-879734.html
- https://cert-portal.siemens.com/productcert/html/ssa-625862.html
- https://cert-portal.siemens.com/productcert/html/ssa-337522.html
- https://cert-portal.siemens.com/productcert/html/ssa-769027.html
- https://cert-portal.siemens.com/productcert/html/ssa-028723.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-0286