Description
Issue summary: Applications performing certificate name checks (e.g., TLS
clients checking server certificates) may attempt to read an invalid memory
address resulting in abnormal termination of the application process.
Impact summary: Abnormal termination of an application can a cause a denial of
service.
Applications performing certificate name checks (e.g., TLS clients checking
server certificates) may attempt to read an invalid memory address when
comparing the expected name with an `otherName` subject alternative name of an
X.509 certificate. This may result in an exception that terminates the
application program.
Note that basic certificate chain validation (signatures, dates, ...) is not
affected, the denial of service can occur only when the application also
specifies an expected DNS name, Email address or IP address.
TLS servers rarely solicit client certificates, and even when they do, they
generally don't perform a name check against a reference identifier (expected
identity), but rather extract the presented identity after checking the
certificate chain. So TLS servers are generally not affected and the severity
of the issue is Moderate.
The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.3.0 – < 3.3.2, 3.2.0 – < 3.2.3, 3.1.0 – < 3.1.7, 3.0.0 – < 3.0.15 | 3.3.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.3.2-1 | — |
| Debian 13 | openssl | 3.3.2-1 | — |
| Debian 12 | openssl | 3.0.14-1~deb12u2 | DSA-5764-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | edk2 | 2024.02-2ubuntu0.6 | USN-7894-1 |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.4 | USN-6986-1 |
| Ubuntu 22.04 LTS | edk2 | 2022.02-3ubuntu0.22.04.4 | USN-7894-1 |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.18 | USN-6986-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.6+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.18+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 16.04 LTS | nodejs | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | edk2 +4 | 20231122-6.el9_4.4 | RHSA-2024:8935 |
| RHEL 9 | openssl +3 | 1:3.0.7-28.el9_4 | RHSA-2024:6783 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | edk2-ovmf +3 | 20231122-6.el9_4.4 | ALSA-2024:8935 |
| AlmaLinux 9 | openssl +3 | 1:3.0.7-28.el9_4 | ALSA-2024:6783 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | edk2 | 20231122-6.el9_4.4 | RLSA-2024:8935 |
| Rocky Linux 9 | openssl | 1:3.0.7-28.el9_4 | RLSA-2024:6783 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-3 | 3.1.4-150600.5.15.1 | SUSE-SU-2025:1516-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.15.1 | SUSE-SU-2024:3106-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.42.1 | SUSE-SU-2024:3105-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
| SLE Micro 6.0 | jitterentropy | 3.4.1-3.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 6.0 | libpulp | 0.3.5-1.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-6.1 | SUSE-SU-2025:20014-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
| SUSE Manager Server 4.3 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
| SUSE Manager Proxy 4.3 | openssl-3 | 3.0.8-150400.4.63.1 | SUSE-SU-2024:3107-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.1.4-13.1 | openSUSE-SU-2024:14317-1 |
| openSUSE Leap 15.6 | openssl-3 | 3.1.4-150600.5.15.1 | SUSE-SU-2024:3106-1 |
| openSUSE Leap 15.5 | openssl-3 | 3.0.8-150500.5.42.1 | SUSE-SU-2024:3105-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.3.2-r0 | — |
| Alpine v3.23 | openssl | 3.3.2-r0 | — |
| Alpine v3.22 | openssl | 3.3.2-r0 | — |
| Alpine v3.21 | openssl | 3.3.2-r0 | — |
| Alpine v3.20 | openssl | 3.3.2-r0 | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | openssl | 3.1.7-r0 | — |
| Alpine v3.18 | openssl | 3.1.7-r0 | — |
| Alpine v3.17 | openssl | 3.0.15-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +4 | 1:3.0.8-1.amzn2023.0.15 | ALAS2023-2024-721 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-3 | — |
| Azure Linux 3 | openssl | 3.3.2-1 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | cloud-hypervisor-cvm | 38.0.72.2-2 | — |
| Azure Linux 2 (CBL-Mariner) | hvloader | 1.0.1-5 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | edk2-ovmf +3 | 20231122-6.0.1.el9_4.4 | ELSA-2024-8935 |
| Oracle Linux 9 | openssl +3 | 1:3.0.7-28.0.1.el9_4 | ELSA-2024-12675, ELSA-2024-6783 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl | 3.3.2-r0 | — |
Advisories 38
- USN-7894-1 edk2 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- ALSA-2024:6783 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8935 Moderate: edk2 security update AlmaLinux Security Advisories · Oct 29, 2026
- SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2025-0001 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2024:8935 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2024:6783 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- WID-SEC-2025-0148 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- ICSA-25-162-05 Siemens SIMATIC S7-1500 CPU family CISA ICS & IT advisories · May 14, 2026
- WID-SEC-2024-2040 OpenSSL: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 5, 2026
- USN-6986-1 openssl vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2025:20014-1 Security update for openssl-3, libpulp, ulp-macros SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-5764-1 openssl - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-25-226-15 Siemens SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 Siemens ProductCERT · Feb 24, 2026
- RLSA-2024:6783 Moderate: openssl security update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:8935 Moderate: edk2 security update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2025:1516-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14317-1 libopenssl-3-devel-3.1.4-13.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3105-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3107-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3106-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Feb 4, 2026
- VDE-2025-053 Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware CERT@VDE · Jul 8, 2025
- NCSC-2025-0187 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 10, 2025
- ICSA-25-044-09 Siemens SCALANCE W700 IEEE 802.11ax CISA ICS & IT advisories · May 6, 2025
- WID-SEC-2025-0612 IBM Security Guardium: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 20, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- SSA-769027 SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0 Siemens ProductCERT · Feb 11, 2025
- NCSC-2025-0027 Kwetsbaarheden verholpen in Oracle Fusion Middleware NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0023 Kwetsbaarheden verholpen in Oracle PeopleSoft NCSC-NL (Netherlands) · Jan 22, 2025
- NCSC-2025-0021 Kwetsbaarheden verholpen in Oracle Communications NCSC-NL (Netherlands) · Jan 22, 2025
- WID-SEC-2024-3201 Oracle Database Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 6, 2024
- ELSA-2024-8935 Moderate: edk2 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 6, 2024
- NCSC-2024-0411 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Oct 17, 2024
- ALAS2023-2024-721 Moderate: openssl security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 14, 2024
- ELSA-2024-6783 Moderate: openssl security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 19, 2024
- ELSA-2024-12675 Moderate: openssl security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 19, 2024
References
- OpenSSL Advisory vendor-advisory
- 3.3.2 git commit patch
- 3.2.3 git commit patch
- 3.1.7 git commit patch
- 3.0.15 git commit patch