Skip to content
OpenAdvisories
Medium USN-6435-1 2 CVEs

openssl vulnerabilities

Published Oct 18, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenSSL incorrectly handled excessively large
Diffie-Hellman parameters. An attacker could possibly use this issue
to cause a denial of service. (CVE-2023-3446)

Bernd Edlinger discovered that OpenSSL incorrectly handled excessively
large Diffie-Hellman parameters. An attacker could possibly use this
issue to cause a denial of service. (CVE-2023-3817)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS openssl 1.0.2g-1ubuntu4.20+esm10
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS openssl 1.1.1-1ubuntu2.1~18.04.23+esm3

Vulnerabilities 2

  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-3817

    Excessive time spent checking DH q parameter value

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2023-3446
  • report
    https://ubuntu.com/security/CVE-2023-3817