Summary
It was discovered that OpenSSL failed to choose an appropriately short
private key size when computing shared-secrets in the Diffie-Hellman Key
Agreement Protocol. A remote attacker could possibly use this issue to cause
OpenSSL to consume resources, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | openssl | 3.0.2-0ubuntu1.16 |
Vulnerabilities 1
-
Unscored —
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecess…
References
-
report
https://ubuntu.com/security/CVE-2022-40735