Skip to content
OpenAdvisories
Low ALSA-2023:7877 4 CVEs

Low: openssl security update

Published Dec 19, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)
* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)
* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 openssl 1:1.1.1k-12.el8_9
AlmaLinux · 8 openssl-devel 1:1.1.1k-12.el8_9
AlmaLinux · 8 openssl-libs 1:1.1.1k-12.el8_9
AlmaLinux · 8 openssl-perl 1:1.1.1k-12.el8_9

Vulnerabilities 4

  • Medium 5.9
    CVE-2024-2408

    PHP is vulnerable to the Marvin Attack

    The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.…

    PHP Group PHP php5 php Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-3817

    Excessive time spent checking DH q parameter value

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-5678

    Excessive time spent in DH check / generation with large Q parameter value

    Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. L…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-3446
  • report
    https://access.redhat.com/security/cve/CVE-2023-3817
  • report
    https://access.redhat.com/security/cve/CVE-2023-5678
  • report
    https://bugzilla.redhat.com/2224962
  • report
    https://bugzilla.redhat.com/2227852
  • report
    https://bugzilla.redhat.com/2248616
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-7877.html
  • report
    https://www.redhat.com/security/data/cve/CVE-2024-2408.html