Skip to content
OpenAdvisories
Medium RHSA-2023:7877 4 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-debuginfo 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-debugsource 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-devel 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-libs 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-libs-debuginfo 1:1.1.1k-12.el8_9
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-perl 1:1.1.1k-12.el8_9

Vulnerabilities 4

  • Medium 5.9
    CVE-2024-2408

    PHP is vulnerable to the Marvin Attack

    The openssl_private_decrypt function in PHP, when using PKCS1 padding (OPENSSL_PKCS1_PADDING, which is the default), is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.…

    PHP Group PHP php5 php Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-3817

    Excessive time spent checking DH q parameter value

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-5678

    Excessive time spent in DH check / generation with large Q parameter value

    Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. L…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2224962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2227852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2248616
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7877.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-3446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3446
  • article
    https://www.openssl.org/news/secadv/20230719.txt
  • report
    https://access.redhat.com/security/cve/CVE-2023-3817
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3817
  • article
    https://www.openssl.org/news/secadv/20230731.txt
  • report
    https://access.redhat.com/security/cve/CVE-2023-5678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-5678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-5678
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
  • article
    https://www.openssl.org/news/secadv/20231106.txt
  • report
    https://access.redhat.com/security/cve/CVE-2024-2408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2270358
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-2408
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-2408
  • article
    https://github.com/php/php-src/security/advisories/GHSA-hh26-4ppw-5864