CVE-2023-2650 — Possible DoS translating ASN.1 object identifiers

Description

Issue summary: Processing some specially crafted ASN.1 object identifiers or
data containing them may be very slow.

Impact summary: Applications that use OBJ_obj2txt() directly, or use any of
the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message
size limit may experience notable to very long delays when processing those
messages, which may lead to a Denial of Service.

An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -
most of which have no size limit. OBJ_obj2txt() may be used to translate
an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL
type ASN1_OBJECT) to its canonical numeric text form, which are the
sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by
periods.

When one of the sub-identifiers in the OBJECT IDENTIFIER is very large
(these are sizes that are seen as absurdly large, taking up tens or hundreds
of KiBs), the translation to a decimal number in text may take a very long
time. The time complexity is O(n^2) with 'n' being the size of the
sub-identifiers in bytes (*).

With OpenSSL 3.0, support to fetch cryptographic algorithms using names /
identifiers in string form was introduced. This includes using OBJECT
IDENTIFIERs in canonical numeric text form as identifiers for fetching
algorithms.

Such OBJECT IDENTIFIERs may be received through the ASN.1 structure
AlgorithmIdentifier, which is commonly used in multiple protocols to specify
what cryptographic algorithm should be used to sign or verify, encrypt or
decrypt, or digest passed data.

Applications that call OBJ_obj2txt() directly with untrusted data are
affected, with any version of OpenSSL. If the use is for the mere purpose
of display, the severity is considered low.

In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,
CMS, CMP/CRMF or TS. It also impacts anything that processes X.509
certificates, including simple things like verifying its signature.

The impact on TLS is relatively low, because all versions of OpenSSL have a
100KiB limit on the peer's certificate chain. Additionally, this only
impacts clients, or servers that have explicitly enabled client
authentication.

In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,
such as X.509 certificates. This is assumed to not happen in such a way
that it would cause a Denial of Service, so these versions are considered
not affected by this issue in such a way that it would be cause for concern,
and the severity is therefore considered low.

Affected products

Vendor	Product	Affected	Fixed
OpenSSL	OpenSSL	3.1.1 – < 3.1.1, 3.0.0 – < 3.0.9, 1.1.1 – < 1.1.1u, 1.0.2 – < 1.0.2zh	3.1.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	openssl	3.0.9-1	—
Debian 13	openssl	3.0.9-1	—
Debian 12	openssl	3.0.9-1	—
Debian 11	openssl	1.1.1n-0+deb11u5	DSA-5417-1
Debian 10	openssl	1.1.1n-0+deb10u5	DLA-3449-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	edk2	2024.02-2ubuntu0.6	USN-7894-1
Ubuntu 22.04 LTS	edk2	2022.02-3ubuntu0.22.04.4	USN-7894-1
Ubuntu 22.04 LTS	nodejs	12.22.9~dfsg-1ubuntu3.4	USN-6672-1
Ubuntu 22.04 LTS	openssl	3.0.2-0ubuntu1.10	USN-6119-1
Ubuntu 20.04 LTS	nodejs	10.19.0~dfsg-3ubuntu1.5	USN-6672-1
Ubuntu 20.04 LTS	openssl	1.1.1f-1ubuntu2.19	USN-6119-1
Ubuntu 18.04 LTS	openssl	1.1.1-1ubuntu2.1~18.04.23	USN-6119-1
Ubuntu 18.04 LTS	openssl1.0	1.0.2n-1ubuntu5.13	USN-6119-1

Show 12 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro FIPS 20.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS 18.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS 16.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS-updates 22.04 LTS	openssl	3.0.2-0ubuntu1.10+Fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	openssl	1.1.1f-1ubuntu2.fips.19	—
Ubuntu Pro FIPS-updates 18.04 LTS	openssl	1.1.1-1ubuntu2.fips.2.1~18.04.23	—
Ubuntu Pro FIPS-updates 16.04 LTS	openssl	1.0.2g-1ubuntu4.fips.4.20.9	—
Ubuntu Pro FIPS-preview 22.04 LTS	openssl	3.0.2-0ubuntu1.10+Fips1	—
Ubuntu Pro 20.04 LTS	edk2	No fix yet	—
Ubuntu Pro 18.04 LTS	edk2	No fix yet	—
Ubuntu Pro 16.04 LTS	edk2	No fix yet	—
Ubuntu Pro 16.04 LTS	openssl	1.0.2g-1ubuntu4.20+esm9	USN-6188-1
Ubuntu Pro 14.04 LTS	openssl	1.0.1f-1ubuntu2.27+esm9	USN-6188-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	edk2 +4	20230524-3.el9	RHSA-2023:6330
RHEL 9	openssl +3	1:3.0.7-16.el9_2	RHSA-2023:3722

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat JBoss Web Server 5	jws5-tomcat +11	9.0.62-19.redhat_00017.1.el7jws	RHSA-2023:7622
Red Hat JBoss Web Server 5	jws5-tomcat-native	1.2.31-16.redhat_16.el7jws	RHSA-2023:7622
Red Hat JBoss Core Services 1	jbcs-httpd24-curl +2	8.4.0-2.el7jbcs	RHSA-2023:7625
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_http2	1.15.19-32.el7jbcs	RHSA-2023:7625
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_jk +1	1.2.49-1.redhat_1.el7jbcs	RHSA-2023:7625
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl +4	1:1.1.1k-16.el7jbcs	RHSA-2023:7625

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 9	edk2-ovmf +3	20230524-3.el9	ALSA-2023:6330
AlmaLinux 9	openssl +3	1:3.0.7-16.el9_2	ALSA-2023:3722

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP5	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES 15 SP5	openssl-1_1	1.1.1l-150500.17.6.1	SUSE-SU-2023:29171-1
SLES 15 SP5	openssl-3	3.0.8-150500.5.3.1	SUSE-SU-2023:2620-1
SLES 15 SP4	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES 15 SP4	openssl-1_1	1.1.1l-150400.7.37.1	SUSE-SU-2023:2342-1
SLES 15 SP4	openssl-3	3.0.8-150400.4.26.1	SUSE-SU-2023:2470-1
SLES 15 SP3	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES 15 SP3	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLES 15 SP2	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES 15 SP2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLES 15 SP1	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES 15 SP1	openssl-1_1	1.1.0i-150100.14.51.1	SUSE-SU-2023:2327-1

Show 24 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SLES 12 SP5	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SLES 12 SP4	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SLES 12 SP4	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SLES 12 SP2	openssl	1.0.2j-60.95.1	SUSE-SU-2023:2332-1
SLES 12	compat-openssl098	0.9.8j-106.51.1	SUSE-SU-2023:2329-1
SLES 11 SP4	openssl	0.9.8j-0.106.71.1	SUSE-SU-2023:2469-1
SLES 11 SP4	openssl1	1.0.1g-0.58.67.1	SUSE-SU-2023:2471-1
SLES for SAP 15 SP3	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES for SAP 15 SP3	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLES for SAP 15 SP2	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES for SAP 15 SP2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLES for SAP 15 SP1	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLES for SAP 15 SP1	openssl-1_1	1.1.0i-150100.14.51.1	SUSE-SU-2023:2327-1
SLES for SAP 12 SP5	compat-openssl098	0.9.8j-106.51.1	SUSE-SU-2023:2329-1
SLES for SAP 12 SP5	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SLES for SAP 12 SP5	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SLES for SAP 12 SP4	compat-openssl098	0.9.8j-106.51.1	SUSE-SU-2023:2329-1
SLES for SAP 12 SP4	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SLES for SAP 12 SP4	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SLE Real Time 15 SP3	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLE Micro 5.4	openssl-1_1	1.1.1l-150400.7.37.1	SUSE-SU-2023:2342-1
SLE Micro 5.3	openssl-1_1	1.1.1l-150400.7.37.1	SUSE-SU-2023:2342-1
SLE Micro 5.2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLE Micro 5.1	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLE HPC 15 SP3	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SLE HPC 15 SP3	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLE HPC 15 SP2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SLE HPC 15 SP1	openssl-1_1	1.1.0i-150100.14.51.1	SUSE-SU-2023:2327-1
SUSE OpenStack Cloud Crowbar 9	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SUSE OpenStack Cloud Crowbar 9	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SUSE OpenStack Cloud 9	openssl-1_0_0	1.0.2p-3.75.1	SUSE-SU-2023:2330-1
SUSE OpenStack Cloud 9	openssl-1_1	1.1.1d-2.84.1	SUSE-SU-2023:2328-1
SUSE Manager Server 4.2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SUSE Manager Proxy 4.2	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SUSE Enterprise Storage 7.1	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SUSE Enterprise Storage 7.1	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1
SUSE Enterprise Storage 7	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
SUSE Enterprise Storage 7	openssl-1_1	1.1.1d-150200.11.65.1	SUSE-SU-2023:2343-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	openssl-1_0_0	1.0.2u-16.1	openSUSE-SU-2024:12966-1
openSUSE Tumbleweed	openssl-1_1	1.1.1u-1.1	openSUSE-SU-2024:12972-1
openSUSE Tumbleweed	openssl-3	3.1.1-1.1	openSUSE-SU-2024:12969-1
openSUSE Tumbleweed	python310	3.10.12-1.1	openSUSE-SU-2024:13031-1
openSUSE Tumbleweed	python311	3.11.4-1.1	openSUSE-SU-2024:13038-1
openSUSE Tumbleweed	python312	3.12.0b3-1.1	openSUSE-SU-2024:13032-1
openSUSE Tumbleweed	python313	3.13.0~b3-1.1	openSUSE-SU-2024:14109-1
openSUSE Tumbleweed	python314	3.14.0~a1-1.1	openSUSE-SU-2024:14434-1
openSUSE Tumbleweed	python315	3.15.0~a1-1.1	openSUSE-SU-2025:15713-1
openSUSE Tumbleweed	python38	3.8.17-1.2	openSUSE-SU-2024:13029-1
openSUSE Tumbleweed	python39	3.9.17-1.1	openSUSE-SU-2024:13033-1
openSUSE Leap 15.5	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
openSUSE Leap 15.5	openssl-1_1	1.1.1l-150500.17.6.1	SUSE-SU-2023:29171-1
openSUSE Leap 15.5	openssl-3	3.0.8-150500.5.3.1	SUSE-SU-2023:2620-1
openSUSE Leap 15.4	openssl-1_0_0	1.0.2p-150000.3.76.1	SUSE-SU-2023:2331-1
openSUSE Leap 15.4	openssl-1_1	1.1.1l-150400.7.37.1	SUSE-SU-2023:2342-1
openSUSE Leap 15.4	openssl-3	3.0.8-150400.4.26.1	SUSE-SU-2023:2470-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
openSUSE Leap Micro 5.3	openssl-1_1	1.1.1l-150400.7.37.1	SUSE-SU-2023:2342-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	openssl	3.1.1-r0	—
Alpine v3.23	openssl	3.1.1-r0	—
Alpine v3.22	openssl	3.1.1-r0	—
Alpine v3.21	openssl	3.1.1-r0	—
Alpine v3.20	openssl	3.1.1-r0	—

Show 5 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	openssl	3.1.1-r0	—
Alpine v3.18	openssl	3.1.1-r0	—
Alpine v3.17	openssl	3.0.9-r0	—
Alpine v3.16	openssl	1.1.1u-r0	—
Alpine v3.16	openssl3	3.0.9-r0	—
Alpine v3.15	openssl	1.1.1u-r0	—
Alpine v3.15	openssl3	3.0.9-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	openssl +3	1:3.0.8-1.amzn2023.0.3	ALAS2023-2023-222
Amazon Linux 2	edk2-ovmf +4	20200801stable-1.amzn2.0.5	ALAS2-2024-2502
Amazon Linux 2	openssl +4	1:1.0.2k-24.amzn2.0.7	ALAS2-2023-2073
Amazon Linux 2	openssl11 +3	1:1.1.1g-12.amzn2.0.15	ALAS2-2023-2097

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	edk2	20230301gitf80f052277c8-37	—
Azure Linux 2 (CBL-Mariner)	edk2	20230301gitf80f052277c8-37	—
Azure Linux 2 (CBL-Mariner)	hvloader	1.0.1-9	—
Azure Linux 2 (CBL-Mariner)	kata-containers-cc	0.4.1-2	—
Azure Linux 2 (CBL-Mariner)	openssl	1.1.1k-25	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	edk2-ovmf +3	20230524-3.el9	ELSA-2023-6330
Oracle Linux 9	openssl +3	1:3.0.7-16.0.1.el9_2	ELSA-2023-3722

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	openssl	3.1.1-r0	—

Advisories 50

USN-7894-1 edk2 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
ALSA-2023:6330 Moderate: edk2 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2023:3722 Moderate: openssl security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2023:7625 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2023:7622 Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.7 release and security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2023:6330 Red Hat Security Advisory: edk2 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
RHSA-2023:3722 Red Hat Security Advisory: openssl security and bug fix update Red Hat Security Advisories (RHSA) · Oct 15, 2026
SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
WID-SEC-2024-0120 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
WID-SEC-2023-2917 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 30, 2026
USN-6188-1 openssl vulnerability Ubuntu Security Notices (USN) · Jun 29, 2026
ICSA-24-184-03 Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products (Update E) CISA ICS & IT advisories · Jun 4, 2026
WID-SEC-2023-2690 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 5, 2026
USN-6672-1 nodejs vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
USN-6119-1 openssl, openssl1.0 vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
openSUSE-SU-2025:15713-1 python315-3.15.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
DSA-5417-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-3449-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
openSUSE-SU-2024:12966-1 libopenssl-1_0_0-devel-1.0.2u-16.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2329-1 Security update for compat-openssl098 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:14434-1 python314-3.14.0~a1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13031-1 python310-3.10.12-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2327-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:29171-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:12972-1 libopenssl-1_1-devel-1.1.1u-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2330-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2471-1 Security update for openssl1 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13033-1 python39-3.9.17-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13032-1 python312-3.12.0b3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:12969-1 libopenssl-3-devel-3.1.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2332-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2331-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2343-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:14109-1 python313-3.13.0~b3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2620-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2342-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2328-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13038-1 python311-3.11.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:13029-1 python38-3.8.17-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2470-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2023:2469-1 Security update for openssl SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2023-1323 OpenSSL: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Dec 7, 2025
ALAS2-2024-2502 Important: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Sep 23, 2025
ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
WID-SEC-2024-0064 Juniper Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2025
ICSA-24-158-03 Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch CISA ICS & IT advisories · Jun 6, 2024
WID-SEC-2023-1794 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024
ICSA-23-320-08 Siemens SCALANCE Family Products CISA ICS & IT advisories · Mar 12, 2024
SSA-699386 SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5 Siemens ProductCERT · Mar 12, 2024

EUVD	v3.1	6.5
CISA-ADP	v3.1	6.5

Possible DoS translating ASN.1 object identifiers

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

SUSE

openSUSE

Alpine

Amazon Linux

Azure Linux

Oracle Linux

Wolfi

Advisories 50

References