Description
Issue summary: Checking excessively long DSA keys or parameters may be very
slow.
Impact summary: Applications that use the functions EVP_PKEY_param_check()
or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may
experience long delays. Where the key or parameters that are being checked
have been obtained from an untrusted source this may lead to a Denial of
Service.
The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform
various checks on DSA parameters. Some of those computations take a long time
if the modulus (`p` parameter) is too large.
Trying to use a very large modulus is slow and OpenSSL will not allow using
public keys with a modulus which is over 10,000 bits in length for signature
verification. However the key and parameter check functions do not limit
the modulus size when performing the checks.
An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()
and supplies a key or parameters obtained from an untrusted source could be
vulnerable to a Denial of Service attack.
These functions are not called by OpenSSL itself on untrusted DSA keys so
only applications that directly call these functions may be vulnerable.
Also vulnerable are the OpenSSL pkey and pkeyparam command line applications
when using the `-check` option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.0.0 – < 3.0.14, 3.1.0 – < 3.1.6, 3.2.0 – < 3.2.2, 3.3.0 – < 3.3.1 | 3.0.14 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.2.2-1 | — |
| Debian 13 | openssl | 3.2.2-1 | — |
| Debian 12 | openssl | 3.0.14-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.2 | USN-6937-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.17 | USN-6937-1 |
| Ubuntu 20.04 LTS | openssl | 1.1.1f-1ubuntu2.23 | USN-6937-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.6+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.17+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 18.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 16.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | openssl +3 | 1:3.2.2-6.el9_5 | RHSA-2024:9333 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | openssl +3 | 1:3.2.2-6.el9_5 | ALSA-2024:9333 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | openssl | 1:3.2.2-6.el9_5.1 | RLSA-2024:9333 |
| Rocky Linux 9 | openssl-fips-provider | 3.0.7-6.el9_5 | RLSA-2024:9333 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.7.1 | SUSE-SU-2024:2066-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.33.1 | SUSE-SU-2024:1789-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| SLE Micro 6.0 | jitterentropy | 3.4.1-3.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 6.0 | libpulp | 0.3.5-1.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-6.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| SUSE Manager Server 4.3 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| SUSE Manager Proxy 4.3 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.1.4-8.1 | openSUSE-SU-2024:13992-1 |
| openSUSE Leap 15.6 | openssl-3 | 3.1.4-150600.5.7.1 | SUSE-SU-2024:2066-1 |
| openSUSE Leap 15.5 | openssl-3 | 3.0.8-150500.5.33.1 | SUSE-SU-2024:1789-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
| openSUSE Leap Micro 5.3 | openssl-3 | 3.0.8-150400.4.54.1 | SUSE-SU-2024:1947-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.3.0-r2 | — |
| Alpine v3.23 | openssl | 3.3.0-r2 | — |
| Alpine v3.22 | openssl | 3.3.0-r2 | — |
| Alpine v3.21 | openssl | 3.3.0-r2 | — |
| Alpine v3.20 | openssl | 3.3.0-r2 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 3.1.5-r0 | — |
| Alpine v3.18 | openssl | 3.1.5-r0 | — |
| Alpine v3.17 | openssl | 3.0.13-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +4 | 1:3.0.8-1.amzn2023.0.14 | ALAS2023-2024-677 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cloud-hypervisor-cvm | 38.0.72.2-1 | — |
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-8 | — |
| Azure Linux 3 | nodejs | 20.14.0-1 | — |
| Azure Linux 3 | openssl | 3.3.2-1 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | cloud-hypervisor-cvm | 38.0.72.2-1 | — |
| Azure Linux 2 (CBL-Mariner) | hvloader | 1.0.1-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | openssl +3 | 1:3.2.2-6.0.1.el9_5 | ELSA-2024-9333 |
| Oracle Linux 9 | openssl-fips-provider +1 | 3.0.7-6.0.1.el9_5 | ELSA-2024-9333 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl | 3.3.0-r8 | — |
Advisories 30
- USN-6937-1 openssl vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- ALSA-2024:9333 Low: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:9333 Red Hat Security Advisory: openssl and openssl-fips-provider security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2024-3195 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2025-0647 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
- SUSE-SU-2025:20014-1 Security update for openssl-3, libpulp, ulp-macros SUSE / openSUSE Security Updates · Mar 23, 2026
- ICSA-25-226-15 Siemens SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 Siemens ProductCERT · Feb 24, 2026
- WID-SEC-2024-1171 OpenSSL: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 10, 2026
- RLSA-2024:9333 Low: openssl and openssl-fips-provider security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2024:13992-1 libopenssl-3-devel-3.1.4-8.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1789-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2066-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1947-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-2112 Insyde UEFI Firmware: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Aug 4, 2025
- VDE-2024-071 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware CERT@VDE · May 22, 2025
- ICSA-24-319-06 Siemens SCALANCE M-800 Family CISA ICS & IT advisories · May 6, 2025
- ICSA-25-044-09 Siemens SCALANCE W700 IEEE 802.11ax CISA ICS & IT advisories · May 6, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 Siemens ProductCERT · Feb 11, 2025
- NCSC-2025-0023 Kwetsbaarheden verholpen in Oracle PeopleSoft NCSC-NL (Netherlands) · Jan 22, 2025
- ELSA-2024-9333 Low: openssl and openssl-fips-provider security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- SSA-354112 SSA-354112: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.2 Siemens ProductCERT · Nov 12, 2024
- NCSC-2024-0414 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Oct 17, 2024
- NCSC-2024-0411 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Oct 17, 2024
- ALAS2023-2024-677 Moderate: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 6, 2024
- NCSC-2024-0291 Kwetsbaarheden verholpen in Oracle Database Server NCSC-NL (Netherlands) · Jul 17, 2024
- WID-SEC-2024-1645 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2024
References
- OpenSSL Advisory vendor-advisory
- 3.0.14 git commit patch
- 3.1.6 git commit patch
- 3.2.2 git commit patch
- 3.3.1 git commit patch