Skip to content
OpenAdvisories
High · 7.5 CVE-2023-0401 EUVD-2023-0803GHSA-vrh7-x64v-7vxqRUSTSEC-2023-0013

NULL dereference during PKCS7 data verification

Published Feb 8, 2023 · Updated Nov 4, 2025 · Assigned by openssl

Vendor: OpenSSL Product: OpenSSL Package: nodejs Package: openssl Package: openssl Package: openssl Package: openssl Package: openssl-src Package: openssl3 Ecosystem: Alpine Ecosystem: crates.io Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

A NULL pointer can be dereferenced when signatures are being
verified on PKCS7 signed or signedAndEnveloped data. In case the hash
algorithm used for the signature is known to the OpenSSL library but
the implementation of the hash algorithm is not available the digest
initialization will fail. There is a missing check for the return
value from the initialization function which later leads to invalid
usage of the digest API most likely leading to a crash.

The unavailability of an algorithm can be caused by using FIPS
enabled configuration of providers or more commonly by not loading
the legacy provider.

PKCS7 data is processed by the SMIME library calls and also by the
time stamp (TS) library calls. The TLS implementation in OpenSSL does
not call these functions however third party applications would be
affected if they call these functions to verify signatures on untrusted
data.

Affected products

VendorProductAffectedFixed
OpenSSL OpenSSL 3.0.0 – < 3.0.8 3.0.8

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 openssl 3.0.8-1 —
Debian 13 openssl 3.0.8-1 —
Debian 12 openssl 3.0.8-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS nodejs 12.22.9~dfsg-1ubuntu3.3 USN-6564-1
Ubuntu 22.04 LTS openssl 3.0.2-0ubuntu1.8 USN-5844-1
Ubuntu 20.04 LTS openssl 1.1.1f-1ubuntu2.17 USN-5844-1
Ubuntu 18.04 LTS openssl 1.1.1-1ubuntu2.1~18.04.21 USN-5844-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 openssl +3 1:3.0.1-47.el9_1 RHSA-2023:0946
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.0 EUS openssl +3 1:3.0.1-46.el9_0 RHSA-2023:1199

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 openssl +3 1:3.0.1-47.el9_1 ALSA-2023:0946

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 openssl 1:3.0.1-47.el9_1 RLSA-2023:0946

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 openssl-3 3.0.1-150400.4.17.1 SUSE-SU-2023:0312-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed openssl-3 3.0.8-1.1 openSUSE-SU-2024:12716-1
openSUSE Leap 15.4 openssl-3 3.0.1-150400.4.17.1 SUSE-SU-2023:0312-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 openssl 3.0.8-r0 —
Alpine v3.23 openssl 3.0.8-r0 —
Alpine v3.22 openssl 3.0.8-r0 —
Alpine v3.21 openssl 3.0.8-r0 —
Alpine v3.20 openssl 3.0.8-r0 —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 openssl 3.0.8-r0 —
Alpine v3.18 openssl 3.0.8-r0 —
Alpine v3.17 openssl 3.0.8-r0 —
Alpine v3.16 openssl3 3.0.8-r0 —
Alpine v3.15 openssl3 3.0.8-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 openssl +3 1:3.0.5-1.amzn2023.0.6 ALAS2023-2023-101

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 openssl +3 1:3.0.1-47.0.1.el9_1 ELSA-2023-0946

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling openssl 3.1.0-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io openssl-src >= 300.0.0, < 300.0.12 300.0.12 GHSA-vrh7-x64v-7vxq

Advisories 20

References