Skip to content
OpenAdvisories
Medium RHSA-2024:0154 3 CVEs

Red Hat Security Advisory: openssl security update

Published Sep 13, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-debuginfo 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-debugsource 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-devel 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-libs 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-libs-debuginfo 1:1.1.1k-12.el8_8
Red Hat · RHEL 8.8 EUS rhel_eus:8.8::baseos openssl-perl 1:1.1.1k-12.el8_8

Vulnerabilities 3

  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-3817

    Excessive time spent checking DH q parameter value

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-5678

    Excessive time spent in DH check / generation with large Q parameter value

    Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. L…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2224962
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2227852
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2248616
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0154.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-3446
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3446
  • article
    https://www.openssl.org/news/secadv/20230719.txt
  • report
    https://access.redhat.com/security/cve/CVE-2023-3817
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-3817
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-3817
  • article
    https://www.openssl.org/news/secadv/20230731.txt
  • report
    https://access.redhat.com/security/cve/CVE-2023-5678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-5678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-5678
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017
  • article
    https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6
  • article
    https://www.openssl.org/news/secadv/20231106.txt