Skip to content
OpenAdvisories
Medium ALSA-2023:3722 5 CVEs

Moderate: openssl security and bug fix update

Published Jun 21, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)
* openssl: Denial of service by excessive resource usage in verifying X509 policy constraints (CVE-2023-0464)
* openssl: Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465)
* openssl: Certificate policy check not enabled (CVE-2023-0466)
* openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* In FIPS mode, openssl KDFs should only allow selected hash algorithms (BZ#2175860)
* In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator (BZ#2175864)
* In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally (BZ#2175868)
* openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c (BZ#2175873)
* In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator (BZ#2178029)
* In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator (BZ#2178030)
* In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests (BZ#2178034)
* In FIPS mode, openssl should enter error state when DH PCT fails (BZ#2178039)
* In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 (BZ#2178137)
* Support requiring EMS in TLS 1.2, default to it when in FIPS mode (BZ#2188046)
* OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode (BZ#2188052)
* AlmaLinux9.0 - sshd dumps core when ibmca engine is configured with default_algorithms = CIPHERS or ALL (openssl) (BZ#2211396)

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 9 openssl 1:3.0.7-16.el9_2
AlmaLinux · 9 openssl-devel 1:3.0.7-16.el9_2
AlmaLinux · 9 openssl-libs 1:3.0.7-16.el9_2
AlmaLinux · 9 openssl-perl 1:3.0.7-16.el9_2

Vulnerabilities 5

  • High 7.5
    CVE-2023-0464 Public exploit

    Excessive Resource Usage Verifying X.509 Policy Constraints

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 6.5
    CVE-2023-2650 EPSS 75%

    Possible DoS translating ASN.1 object identifiers

    Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.9
    CVE-2023-1255

    Input buffer over-read in AES-XTS implementation on 64 bit ARM

    Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform ca…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine Wolfi
  • Medium 5.3
    CVE-2023-0465

    Invalid certificate policies in leaf certificates are silently ignored

    Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate pol…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-0466

    Certificate policy check not enabled

    The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or in…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-0464
  • report
    https://access.redhat.com/security/cve/CVE-2023-0465
  • report
    https://access.redhat.com/security/cve/CVE-2023-0466
  • report
    https://access.redhat.com/security/cve/CVE-2023-1255
  • report
    https://access.redhat.com/security/cve/CVE-2023-2650
  • report
    https://bugzilla.redhat.com/2181082
  • report
    https://bugzilla.redhat.com/2182561
  • report
    https://bugzilla.redhat.com/2182565
  • report
    https://bugzilla.redhat.com/2188461
  • report
    https://bugzilla.redhat.com/2207947
  • advisory
    https://errata.almalinux.org/9/ALSA-2023-3722.html