{"schema_version":"1","data":[{"id":29878,"advisory_id":"8b9ba18a-5ebb-4e4c-ae3b-2cd011673b4c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2018-0737","source_published_at":"2018-04-16T17:00:00+00:00","published_at":"2026-10-25T08:06:26.222643+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2018-0737"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cache timing vulnerability in RSA Key Generation","summary":"The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).","evidence":"cve:CVE-2018-0737","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-0737","aliases":["CVE-2018-0737"],"metrics":[{"other":{"type":"unknown","content":{"url":"https://www.openssl.org/policies/secpolicy.html#Low","lang":"eng","value":"Low"}}}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h)"},{"status":"affected","version":"Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o)"}]}],"modified":"2026-10-15T17:19:17.232Z","provider":"cve","references":["https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","https://www.debian.org/security/2018/dsa-4355","https://usn.ubuntu.com/3628-2/","https://security.gentoo.org/glsa/201811-21","https://usn.ubuntu.com/3692-2/","https://access.redhat.com/errata/RHSA-2018:3505","https://usn.ubuntu.com/3692-1/","https://access.redhat.com/errata/RHSA-2018:3221","https://www.debian.org/security/2018/dsa-4348","https://usn.ubuntu.com/3628-1/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","https://access.redhat.com/errata/RHSA-2019:3933","https://access.redhat.com/errata/RHSA-2019:3935","https://access.redhat.com/errata/RHSA-2019:3932","https://www.oracle.com/security-alerts/cpuapr2020.html","https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","https://www.tenable.com/security/tns-2018-14","https://securityadvisories.paloaltonetworks.com/Home/Detail/133","https://www.tenable.com/security/tns-2018-13","https://www.tenable.com/security/tns-2018-17","https://www.tenable.com/security/tns-2018-12","https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","https://www.oracle.com//security-alerts/cpujul2021.html","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","https://www.openssl.org/news/secadv/20180416.txt","https://security.netapp.com/advisory/ntap-20180726-0003/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00043.html","name":"[debian-lts-announce] 20180728 [SECURITY] [DLA 1449-1] openssl security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4355","name":"DSA-4355","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://usn.ubuntu.com/3628-2/","name":"USN-3628-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201811-21","name":"GLSA-201811-21","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-2/","name":"USN-3692-2","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3505","name":"RHSA-2018:3505","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.securityfocus.com/bid/103766","name":"103766","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://usn.ubuntu.com/3692-1/","name":"USN-3692-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3221","name":"RHSA-2018:3221","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.debian.org/security/2018/dsa-4348","name":"DSA-4348","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securitytracker.com/id/1040685","name":"1040685","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://usn.ubuntu.com/3628-1/","name":"USN-3628-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWC42UXL5GHTU5G77VKBF6JYUUNGSHOM/","name":"FEDORA-2019-db06efdea1","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBEV5QGDRFUZDMNECFXUSN5FMYOZDE4V/","name":"FEDORA-2019-00c25b9379","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3IVFGSERAZLNJCK35TEM2R4726XIH3Z/","name":"FEDORA-2019-9a0a7c0986","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3933","name":"RHSA-2019:3933","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3935","name":"RHSA-2019:3935","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3932","name":"RHSA-2019:3932","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-14","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://securityadvisories.paloaltonetworks.com/Home/Detail/133","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-13","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-17","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.tenable.com/security/tns-2018-12","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nodejs.org/en/blog/vulnerability/august-2018-security-releases/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=349a41da1ad88ad87825414752a8ff5fdd6a6c3f","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6939eab03a6e23d2bd2c3f5e34fe1d48e542e787","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.openssl.org/news/secadv/20180416.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20180726-0003/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-05T03:35:49.323Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2018-0737","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-15T17:19:07.239978Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T17:19:17.232Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2021-07-20T22:53:10.000Z"}}},"related_cves":[{"value":"CVE-2018-0737","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28264,"advisory_id":"fec91335-067a-4815-af12-a8fd9f5864ff","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28390","source_published_at":"2026-04-07T22:00:54.172+00:00","published_at":"2026-10-25T07:39:04.15315+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-28390"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo","summary":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.","evidence":"cve:CVE-2026-28390","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28390","aliases":["CVE-2026-28390"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.2","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.6","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.5","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.20","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:15:35.711Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260407.txt","https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc","https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6","https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788","https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75","https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28390","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-10T20:24:15.925981Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-10T20:26:06.061Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:15:35.711Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-04-15T07:28:22.729Z"}}},"related_cves":[{"value":"CVE-2026-28390","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28263,"advisory_id":"e593e5bf-190b-437d-8173-61453cd0e2d1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28389","source_published_at":"2026-04-07T22:00:53.364+00:00","published_at":"2026-10-25T07:39:03.537507+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-28389"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo","summary":"Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.","evidence":"cve:CVE-2026-28389","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28389","aliases":["CVE-2026-28389"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.2","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.6","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.5","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.20","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:15:34.490Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260407.txt","https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686","https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5","https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616","https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a","https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28389","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-10T20:20:14.953384Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-10T20:20:45.506Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:15:34.490Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-04-15T07:28:13.700Z"}}},"related_cves":[{"value":"CVE-2026-28389","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28262,"advisory_id":"a498a880-270f-4bcf-b81c-9092090acc28","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28388","source_published_at":"2026-04-07T22:00:52.382+00:00","published_at":"2026-10-25T07:39:02.950553+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-28388"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"NULL Pointer Dereference When Processing a Delta CRL","summary":"Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application. When CRL processing and delta CRL processing is enabled during X.509 certificate verification, the delta CRL processing does not check whether the CRL Number extension is NULL before dereferencing it. When a malformed delta CRL file is being processed, this parameter can be NULL, causing a NULL pointer dereference. Exploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in the verification context, the certificate being verified to contain a freshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and an attacker to provide a malformed CRL to an application that processes it. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.","evidence":"cve:CVE-2026-28388","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28388","aliases":["CVE-2026-28388"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.2","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.6","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.5","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.20","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zp","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:15:33.077Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260407.txt","https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3","https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726","https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8","https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139","https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28388","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-04-10T20:18:04.195701Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-04-10T20:18:43.095Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:15:33.077Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-04-07T22:00:52.382Z"}}},"related_cves":[{"value":"CVE-2026-28388","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":28261,"advisory_id":"d10a4614-7073-4353-838f-1888d2d8863d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28387","source_published_at":"2026-04-07T22:00:51.496+00:00","published_at":"2026-10-25T07:39:02.304779+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-28387"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Potential Use-after-free in DANE Client Code","summary":"Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, the issue only affects clients that make use of TLSA records with both the PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate usage. By far the most common deployment of DANE is in SMTP MTAs for which RFC7672 recommends that clients treat as 'unusable' any TLSA records that have the PKIX certificate usages. These SMTP (or other similar) clients are not vulnerable to this issue. Conversely, any clients that support only the PKIX usages, and ignore the DANE-TA(2) usage are also not vulnerable. The client would also need to be communicating with a server that publishes a TLSA RRset with both types of TLSA records. No FIPS modules are affected by this issue, the problem code is outside the FIPS module boundary.","evidence":"cve:CVE-2026-28387","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28387","aliases":["CVE-2026-28387"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.2","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.6","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.5","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.20","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zg","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:15:31.851Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260407.txt","https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe","https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3","https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b","https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7","https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28387","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-04-09T03:56:07.962224Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-05-10T20:10:20.584Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:15:31.851Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-04-07T22:00:51.496Z"}}},"related_cves":[{"value":"CVE-2026-28387","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27190,"advisory_id":"fd05065b-c3f1-47c2-b821-6b0ea9aa0b53","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22796","source_published_at":"2026-01-27T16:01:28.15+00:00","published_at":"2026-10-25T07:21:09.032406+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-22796"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function","summary":"Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.","evidence":"cve:CVE-2026-22796","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-22796","aliases":["CVE-2026-22796"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:21.460Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2","https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4","https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12","https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e","https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-22796","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-27T16:27:50.351586Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-27T16:28:52.046Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:21.460Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:28.150Z"}}},"related_cves":[{"value":"CVE-2026-22796","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27189,"advisory_id":"5aedf5e6-bd97-46f2-8528-8002bec64716","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-22795","source_published_at":"2026-01-27T16:01:27.32+00:00","published_at":"2026-10-25T07:21:08.33426+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2026-22795"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Missing ASN1_TYPE validation in PKCS#12 parsing","summary":"Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.","evidence":"cve:CVE-2026-22795","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-22795","aliases":["CVE-2026-22795"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:12:20.101Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2","https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4","https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12","https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e","https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-22795","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-28T20:03:18.604129Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-29T18:13:37.371Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:12:20.101Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:27.320Z"}}},"related_cves":[{"value":"CVE-2026-22795","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27161,"advisory_id":"f34adeeb-2f9d-4d08-bafa-915d8ced5563","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-9230","source_published_at":"2025-09-30T13:17:00.808+00:00","published_at":"2026-10-25T07:20:49.475131+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-9230"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out-of-bounds read & write in RFC 3211 KEK Unwrap","summary":"Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.","evidence":"cve:CVE-2025-9230","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-9230","aliases":["CVE-2025-9230"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Moderate"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.5.0","lessThan":"3.5.4","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.3","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.5","versionType":"semver"},{"status":"affected","version":"3.2.0","lessThan":"3.2.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.18","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zd","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zm","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:02:22.327Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20250930.txt","https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482","https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280","https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45","https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd","https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def","https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba","https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-9230","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-09-30T19:30:08.302408Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-09-30T19:30:29.803Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html"},{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-04T21:15:17.295Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V4.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCH328","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM324","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM328","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM332","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.800","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","versions":[{"status":"affected","version":"0","lessThan":"V7.26.0310","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:02:22.327Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2025-09-30T13:17:00.808Z"}}},"related_cves":[{"value":"CVE-2025-9230","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27159,"advisory_id":"e5b1e812-6566-41d7-8526-3333f63476da","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-9232","source_published_at":"2025-09-30T13:17:19.172+00:00","published_at":"2026-10-25T07:20:48.275017+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-9232"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out-of-bounds read in HTTP client no_proxy handling","summary":"Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.","evidence":"cve:CVE-2025-9232","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-9232","aliases":["CVE-2025-9232"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.5.0","lessThan":"3.5.4","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.3","versionType":"semver"},{"status":"affected","version":"3.3.3","lessThan":"3.3.5","versionType":"semver"},{"status":"affected","version":"3.2.4","lessThan":"3.2.6","versionType":"semver"},{"status":"affected","version":"3.0.16","lessThan":"3.0.18","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:02:23.968Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20250930.txt","https://github.com/openssl/openssl/commit/2b4ec20e47959170422922eaff25346d362dcb35","https://github.com/openssl/openssl/commit/7cf21a30513c9e43c4bc3836c237cf086e194af3","https://github.com/openssl/openssl/commit/bbf38c034cdabd0a13330abcc4855c866f53d2e0","https://github.com/openssl/openssl/commit/89e790ac431125a4849992858490bed6b225eadf","https://github.com/openssl/openssl/commit/654dc11d23468a74fc8ea4672b702dd3feb7be4b"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-9232","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-09-30T19:22:31.407504Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-09-30T19:22:35.483Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/5"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-04T21:15:19.948Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V4.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCH328","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM324","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM328","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM332","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRH334 (24 V DC, 8xFO, CC)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230 V AC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24 V DC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 12xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230 V AC, 8xFO)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)","versions":[{"status":"affected","version":"0","lessThan":"V3.3","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.800","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Secured SmartPlug","versions":[{"status":"affected","version":"0","lessThan":"V7.26.0310","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC CN 4100","versions":[{"status":"affected","version":"0","lessThan":"V5.0","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-485750.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-253495.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:02:23.968Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2025-09-30T13:17:19.172Z"}}},"related_cves":[{"value":"CVE-2025-9232","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27134,"advisory_id":"7a8f6228-fd8d-4baa-823a-cc24752bc07b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-69421","source_published_at":"2026-01-27T16:01:26.435+00:00","published_at":"2026-10-25T07:20:29.679404+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-69421"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function","summary":"Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.","evidence":"cve:CVE-2025-69421","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-69421","aliases":["CVE-2025-69421"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:10:29.317Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c","https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b","https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3","https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd","https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-69421","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-28T15:17:58.059460Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-02-28T02:58:24.792Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:10:29.317Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:26.435Z"}}},"related_cves":[{"value":"CVE-2025-69421","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27133,"advisory_id":"54ba36cb-be31-4576-8e4b-74c174525d63","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-69420","source_published_at":"2026-01-27T16:01:25.643+00:00","published_at":"2026-10-25T07:20:29.093015+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-69420"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Missing ASN1_TYPE validation in TS_RESP_verify_response() function","summary":"Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.","evidence":"cve:CVE-2025-69420","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-69420","aliases":["CVE-2025-69420"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:10:28.084Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085","https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e","https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9","https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b","https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-69420","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-28T19:33:06.662569Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-28T19:33:41.253Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:10:28.084Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:25.643Z"}}},"related_cves":[{"value":"CVE-2025-69420","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27132,"advisory_id":"a9a33bbb-23a0-452a-8b1b-aa0f8f574a30","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-69419","source_published_at":"2026-01-27T16:01:24.822+00:00","published_at":"2026-10-25T07:20:28.51248+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-69419"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion","summary":"Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that","evidence":"cve:CVE-2025-69419","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-69419","aliases":["CVE-2025-69419"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:10:26.835Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb","https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535","https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015","https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2","https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.4,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-69419","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-01-29T15:09:04.605559Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-29T15:09:39.154Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:10:26.835Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:24.822Z"}}},"related_cves":[{"value":"CVE-2025-69419","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27131,"advisory_id":"084e1868-353e-4953-8ea4-06f7e2f94488","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-69418","source_published_at":"2026-01-27T16:01:23.986+00:00","published_at":"2026-10-25T07:20:27.913244+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-69418"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Unauthenticated/unencrypted trailing bytes with low-level OCB function calls","summary":"Issue summary: When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes can leave the final partial block unencrypted and unauthenticated. Impact summary: The trailing 1-15 bytes of a message may be exposed in cleartext on encryption and are not covered by the authentication tag, allowing an attacker to read or tamper with those bytes without detection. The low-level OCB encrypt and decrypt routines in the hardware-accelerated stream path process full 16-byte blocks but do not advance the input/output pointers. The subsequent tail-handling code then operates on the original base pointers, effectively reprocessing the beginning of the buffer while leaving the actual trailing bytes unprocessed. The authentication checksum also excludes the true tail bytes. However, typical OpenSSL consumers using EVP are not affected because the higher-level EVP and provider OCB implementations split inputs so that full blocks and trailing partial blocks are processed in separate calls, avoiding the problematic code path. Additionally, TLS does not use OCB ciphersuites. The vulnerability only affects applications that call the low-level CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with non-block-aligned lengths in a single call on hardware-accelerated builds. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not af","evidence":"cve:CVE-2025-69418","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-69418","aliases":["CVE-2025-69418"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:10:25.604Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977","https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8","https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc","https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae","https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-69418","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-29T15:06:43.617751Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-29T15:07:14.052Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:10:25.604Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:23.986Z"}}},"related_cves":[{"value":"CVE-2025-69418","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":27112,"advisory_id":"fb89eb3f-c3fe-4388-b1d8-d6a39fed34a0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-68160","source_published_at":"2026-01-27T16:01:23.181+00:00","published_at":"2026-10-25T07:20:14.948572+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2025-68160"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Heap out-of-bounds write in BIO_f_linebuffer on short writes","summary":"Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.","evidence":"cve:CVE-2025-68160","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-68160","aliases":["CVE-2025-68160"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.6.0","lessThan":"3.6.1","versionType":"semver"},{"status":"affected","version":"3.5.0","lessThan":"3.5.5","versionType":"semver"},{"status":"affected","version":"3.4.0","lessThan":"3.4.4","versionType":"semver"},{"status":"affected","version":"3.3.0","lessThan":"3.3.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.19","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1ze","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zn","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T01:09:37.639Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20260127.txt","https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c","https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0","https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096","https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad","https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2025-68160","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-01-29T15:04:54.880991Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-01-29T15:06:04.443Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T01:09:37.639Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2026-01-27T16:01:23.181Z"}}},"related_cves":[{"value":"CVE-2025-68160","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26834,"advisory_id":"6057e87c-0f29-4204-b8f8-cdcf1f2874f2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-9143","source_published_at":"2024-10-16T17:09:23.844+00:00","published_at":"2026-10-25T07:15:53.379104+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2024-9143"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Low-level invalid GF(2^m) parameters lead to OOB memory access","summary":"Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, however, in all the protocols involving Elliptic Curve Cryptography that we're aware of, either only \"named curves\" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2^m)) curves that can't represent problematic input values. Thus the likelihood of existence of a vulnerable application is low. In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates. Any problematic use-cases would have to be using an \"exotic\" curve encoding. The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions. Applications working with \"exotic\" explicit binary (GF(2^m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds. Remote code execution cannot easily be ruled out. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.","evidence":"cve:CVE-2024-9143","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-9143","aliases":["CVE-2024-9143"],"metrics":[{"other":{"type":"https://openssl-library.org/policies/general/security-policy/","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.3.0","lessThan":"3.3.3","versionType":"semver"},{"status":"affected","version":"3.2.0","lessThan":"3.2.4","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.8","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.16","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1zb","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zl","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:37:50.974Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20241016.txt","https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4","https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700","https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154","https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712","https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a","https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-9143","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-10-16T19:45:11.544020Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-11-08T15:30:04.030Z"}},{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2024/10/16/1"},{"url":"http://www.openwall.com/lists/oss-security/2024/10/23/1"},{"url":"http://www.openwall.com/lists/oss-security/2024/10/24/1"},{"url":"https://security.netapp.com/advisory/ntap-20241101-0001/"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T22:33:18.178Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:37:50.974Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2025-09-01T08:29:10.392Z"}}},"related_cves":[{"value":"CVE-2024-9143","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26830,"advisory_id":"703f30fc-3582-4df3-a391-62a4144e83b3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-6119","source_published_at":"2024-09-03T15:58:06.97+00:00","published_at":"2026-10-25T07:15:50.896541+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2024-6119"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Possible denial of service in X.509 name checks","summary":"Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected DNS name, Email address or IP address. TLS servers rarely solicit client certificates, and even when they do, they generally don't perform a name check against a reference identifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS servers are generally not affected and the severity of the issue is Moderate. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.","evidence":"cve:CVE-2024-6119","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-6119","aliases":["CVE-2024-6119"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Moderate"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.3.0","lessThan":"3.3.2","versionType":"semver"},{"status":"affected","version":"3.2.0","lessThan":"3.2.3","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.15","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:33:30.773Z","provider":"cve","references":["https://openssl-library.org/news/secadv/20240903.txt","https://github.com/openssl/openssl/commit/7dfcee2cd2a63b2c64b9b4b0850be64cb695b0a0","https://github.com/openssl/openssl/commit/05f360d9e849a1b277db628f1f13083a7f8dd04f","https://github.com/openssl/openssl/commit/621f3729831b05ee828a3203eddb621d014ff2b2","https://github.com/openssl/openssl/commit/06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2024/09/03/4"},{"url":"https://lists.freebsd.org/archives/freebsd-security/2024-September/000303.html"},{"url":"https://security.netapp.com/advisory/ntap-20240912-0001/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-09-12T16:03:01.704Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-6119","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-09-03T20:20:39.935362Z"}}}],"affected":[{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vendor":"openssl","product":"openssl","versions":[{"status":"affected","version":"3.3.0","lessThan":"3.3.2","versionType":"custom"},{"status":"affected","version":"3.2.0","lessThan":"3.2.3","versionType":"custom"},{"status":"affected","version":"3.1.0","lessThan":"3.1.7","versionType":"custom"},{"status":"affected","version":"3.0.0","lessThan":"3.0.15","versionType":"custom"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-09-03T20:25:47.056Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:33:30.773Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-09-03T15:58:06.970Z"}}},"related_cves":[{"value":"CVE-2024-6119","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26821,"advisory_id":"a763479a-179a-48a6-a91e-e70865bc8766","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-5535","source_published_at":"2024-06-27T10:30:53.118+00:00","published_at":"2026-10-25T07:15:45.348516+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2024-5535"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"SSL_select_next_proto buffer overread","summary":"Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes of arbitrary private data from memory being sent to the peer leading to a loss of confidentiality. However, only applications that directly call the SSL_select_next_proto function with a 0 length list of supported client protocols are affected by this issue. This would normally never be a valid scenario and is typically not under attacker control but may occur by accident in the case of a configuration or programming error in the calling application. The OpenSSL API function SSL_select_next_proto is typically used by TLS applications that support ALPN (Application Layer Protocol Negotiation) or NPN (Next Protocol Negotiation). NPN is older, was never standardised and is deprecated in favour of ALPN. We believe that ALPN is significantly more widely deployed than NPN. The SSL_select_next_proto function accepts a list of protocols from the server and a list of protocols from the client and returns the first protocol that appears in the server list that also appears in the client list. In the case of no overlap between the two lists it returns the first item in the client list. In either case it will signal whether an o","evidence":"cve:CVE-2024-5535","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-5535","aliases":["CVE-2024-5535"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.3.0","lessThan":"3.3.2","versionType":"semver"},{"status":"affected","version":"3.2.0","lessThan":"3.2.3","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.7","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.15","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1za","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zk","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:29:32.069Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20240627.txt","https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-5535","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-11-08T00:00:00+00:00"}}}],"affected":[{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vendor":"openssl","product":"openssl","versions":[{"status":"affected","version":"3.3.0","lessThan":"3.3.2","versionType":"custom"},{"status":"affected","version":"3.2.0","lessThan":"3.2.3","versionType":"custom"},{"status":"affected","version":"3.1.0","lessThan":"3.1.7","versionType":"custom"},{"status":"affected","version":"3.0.0","lessThan":"3.0.15","versionType":"custom"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1za","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zk","versionType":"custom"}],"defaultStatus":"unknown"}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-11-14T04:55:17.007Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20240627.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c","name":"3.3.2 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e","name":"3.2.3 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37","name":"3.1.7 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c","name":"3.0.15 git commit","tags":["patch","x_transferred"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87","name":"1.1.1za git commit","tags":["patch","x_transferred"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c","name":"1.0.2zk git commit","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/27/1","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/06/28/4","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240712-0005/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/08/15/1"},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0010/"},{"url":"https://security.netapp.com/advisory/ntap-20241025-0006/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T22:32:30.900Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:29:32.069Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2025-09-01T08:29:27.594Z"}}},"related_cves":[{"value":"CVE-2024-5535","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26410,"advisory_id":"d1627b27-714f-47e4-b982-f705386fc560","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-2511","source_published_at":"2024-04-08T13:51:12.349+00:00","published_at":"2026-10-25T07:08:52.367468+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2024-2511"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Unbounded memory growth with session handling in TLSv1.3","summary":"Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.","evidence":"cve:CVE-2024-2511","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-2511","aliases":["CVE-2024-2511"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.2.0","lessThan":"3.2.2","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.6","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.14","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1y","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:25:23.074Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20240408.txt","https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-2511","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-09T15:14:41.481807Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-28T19:21:08.630Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20240408.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08","name":"3.2.2 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce","name":"3.1.6 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d","name":"3.0.14 git commit","tags":["patch","x_transferred"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640","name":"1.1.1y git commit","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/04/08/5","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240503-0013/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T21:54:02.419Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) EU","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM RM1224 LTE(4G) NAM","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M804PB","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M812-1 ADSL-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M816-1 ADSL-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M826-2 SHDSL-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M874-2","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M874-3","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M874-3 3G-Router (CN)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M876-3","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M876-3 (ROK)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M876-4","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M876-4 (EU)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE M876-4 (NAM)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (A1)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (B1)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM853-1 (EU)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (A1)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (B1)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (CN)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (EU)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE MUM856-1 (RoW)","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE S615 EEC LAN-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE S615 LAN-Router","versions":[{"status":"affected","version":"0","lessThan":"V8.2","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"affected","version":"0","lessThan":"V3.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-354112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:25:23.074Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:56:00.208Z"}}},"related_cves":[{"value":"CVE-2024-2511","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":26394,"advisory_id":"b987fa59-e892-424b-9735-0b12d2552ddc","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-0727","source_published_at":"2024-01-26T08:57:19.579+00:00","published_at":"2026-10-25T07:08:42.556005+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2024-0727"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"PKCS12 Decoding crashes","summary":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can contain certificates and keys and may come from an untrusted source. The PKCS12 specification allows certain fields to be NULL, but OpenSSL does not correctly check for this case. This can lead to a NULL pointer dereference that results in OpenSSL crashing. If an application processes PKCS12 files from an untrusted source using the OpenSSL APIs then that application will be vulnerable to this issue. OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() and PKCS12_newpass(). We have also fixed a similar issue in SMIME_write_PKCS7(). However since this function is related to writing data we do not consider it security significant. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.","evidence":"cve:CVE-2024-0727","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-0727","aliases":["CVE-2024-0727"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.2.0","lessThan":"3.2.1","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.5","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.13","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1x","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zj","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-15T00:21:17.299Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20240125.txt","https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20240125.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a","name":"3.2.1 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c","name":"3.1.5 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2","name":"3.0.13 git commit","tags":["patch","x_transferred"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8","name":"1.1.1x git commit","tags":["patch","x_transferred"]},{"url":"https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539","name":"1.0.2zj git commit","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240208-0006/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T21:51:01.094Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-0727","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-05-08T20:15:21.221130Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-476","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-29T15:17:17.376Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-15T00:21:17.299Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:58.371Z"}}},"related_cves":[{"value":"CVE-2024-0727","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24294,"advisory_id":"9eee4a17-59f1-41a9-b2ea-670a258979df","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6237","source_published_at":"2024-04-25T06:27:26.99+00:00","published_at":"2026-10-25T06:33:08.005843+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-6237"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Excessive time spent checking invalid RSA public keys","summary":"Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Where the key that is being checked has been obtained from an untrusted source this may lead to a Denial of Service. When function EVP_PKEY_public_check() is called on RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is an overly large prime, then this computation would take a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function EVP_PKEY_public_check() is not called from other OpenSSL functions however it is called from the OpenSSL pkey command line application. For that reason that application is also vulnerable if used with the '-pubin' and '-check' options on untrusted data. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.","evidence":"cve:CVE-2023-6237","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-6237","aliases":["CVE-2023-6237"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.0.0","lessThan":"3.0.13","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.5","versionType":"semver"},{"status":"affected","version":"3.2.0","lessThan":"3.2.1","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T22:15:15.166Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20240115.txt","https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20240115.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a","name":"3.0.13 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294","name":"3.1.5 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","name":"3.2.1 git commit","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240531-0007/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:18.096Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.9,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-6237","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-08-20T14:44:52.382969Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-11-01T14:28:51.338Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:15.166Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:56.955Z"}}},"related_cves":[{"value":"CVE-2023-6237","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24292,"advisory_id":"3eade606-4b8b-4cc7-aebb-457236199d57","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6129","source_published_at":"2024-01-09T16:36:58.86+00:00","published_at":"2026-10-25T06:33:06.836906+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-6129"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"POLY1305 MAC implementation corrupts vector registers on PowerPC","summary":"Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL for PowerPC CPUs restores the contents of vector registers in a different order than they are saved. Thus the contents of some of these vector registers are corrupted when returning to the caller. The vulnerable code is used only on newer PowerPC processors supporting the PowerISA 2.07 instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However unless the compiler uses the vector registers for storing pointers, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. The POLY1305 MAC algorithm is most frequently used as part of the CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) algorithm. The most common usage of this AEAD ci","evidence":"cve:CVE-2023-6129","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-6129","aliases":["CVE-2023-6129"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.2.0","lessThan":"3.2.1","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.5","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.13","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T22:11:17.140Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20240109.txt","https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20240109.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/5b139f95c9a47a55a0c54100f3837b1eee942b04","name":"3.2.1 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/f3fc5808fe9ff74042d639839610d03b8fdcc015","name":"3.1.5 git commit","tags":["patch","x_transferred"]},{"url":"https://github.com/openssl/openssl/commit/050d26383d4e264966fb83428e72d5d48f402d35","name":"3.0.13 git commit","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0009/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0013/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0008/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240503-0011/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:17.314Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-6129","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-01-22T14:31:57.012999Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-20T15:28:07.908Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:11:17.140Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:55.315Z"}}},"related_cves":[{"value":"CVE-2023-6129","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24288,"advisory_id":"e576d145-3419-49a5-b6cc-6cc06cba8ae3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5363","source_published_at":"2023-10-24T15:31:40.89+00:00","published_at":"2026-10-25T06:33:04.101753+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-5363"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Incorrect cipher key & IV length processing","summary":"Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes. When calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() the provided OSSL_PARAM array is processed after the key and IV have been established. Any alterations to the key length, via the \"keylen\" parameter or the IV length, via the \"ivlen\" parameter, within the OSSL_PARAM array will not take effect as intended, potentially causing truncation or overreading of these values. The following ciphers and cipher modes are impacted: RC2, RC4, RC5, CCM, GCM and OCB. For the CCM, GCM and OCB cipher modes, truncation of the IV can result in loss of confidentiality. For example, when following NIST's SP 800-38D section 8.2.1 guidance for constructing a deterministic IV for AES in GCM mode, truncation of the counter portion could lead to IV reuse. Both truncations and overruns of the key and overruns of the IV will produce incorrect results and could, in some cases, trigger a memory exception. However, these issues are not currently assessed as security critical. Changing the key and/or IV lengths is not considered to be a common operation and the vulnerable API was recently introduced. Furthermore it is likely that applica","evidence":"cve:CVE-2023-5363","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-5363","aliases":["CVE-2023-5363"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"MODERATE"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.0.0","lessThan":"3.0.12","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.4","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T21:58:15.012Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20231024.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20231024.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=5f69f5c65e483928c4b28ed16af6e5742929f1ee","name":"3.1.4 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0df40630850fb2740e6be6890bb905d3fc623b2d","name":"3.0.12 git commit","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/10/24/1","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5532","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0010/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240201-0003/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240201-0004/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T21:50:37.158Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-5363","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-03T19:15:36.625641Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-02T19:49:14.914Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:58:15.012Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:52.132Z"}}},"related_cves":[{"value":"CVE-2023-5363","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24287,"advisory_id":"49f5c9ad-9e69-434c-b98a-6861fc7473a5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-5678","source_published_at":"2023-11-06T15:47:30.795+00:00","published_at":"2026-10-25T06:33:03.500561+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-5678"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Excessive time spent in DH check / generation with large Q parameter value","summary":"Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn't make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn't check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command l","evidence":"cve:CVE-2023-5678","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-5678","aliases":["CVE-2023-5678"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"LOW"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"1.0.2","lessThan":"1.0.2zj","versionType":"custom"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1x","versionType":"custom"},{"status":"affected","version":"3.0.0","lessThan":"3.0.13","versionType":"semver"},{"status":"affected","version":"3.1.0","lessThan":"3.1.5","versionType":"semver"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T22:03:03.588Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20231106.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20231106.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055","name":"1.0.2zj git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c","name":"1.1.1x git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017","name":"3.0.13 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6","name":"3.1.5 git commit","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231130-0010/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/11/1","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html"},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-03T21:50:41.915Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-5678","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-12-02T19:42:37.122304Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-12-02T19:42:55.034Z"}},{"affected":[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","versions":[{"status":"unaffected","version":"0","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-128433.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:03:03.588Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:53.778Z"}}},"related_cves":[{"value":"CVE-2023-5678","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":24279,"advisory_id":"a348af2e-2b1b-4019-8fed-9c2ef5636963","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-4807","source_published_at":"2023-09-08T11:01:53.663+00:00","published_at":"2026-10-25T06:32:58.764856+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-4807"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"POLY1305 MAC implementation corrupts XMM registers on Windows","summary":"Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impact summary: If in an application that uses the OpenSSL library an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. The POLY1305 MAC algo","evidence":"cve:CVE-2023-4807","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-4807","aliases":["CVE-2023-4807"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.3","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.11","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1w","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T21:40:59.783Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230908.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4bfac4471f53c4f74c8d81020beb938f92d84ca5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6754de4a121ec7f261b16723180df6592cbb4508","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a632d534c73eeb3e3db8c7540d811194ef7c79ff"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230908.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=4bfac4471f53c4f74c8d81020beb938f92d84ca5","name":"3.1.3 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6754de4a121ec7f261b16723180df6592cbb4508","name":"3.0.11 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a632d534c73eeb3e3db8c7540d811194ef7c79ff","name":"1.1.1w git commit","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230921-0001/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:38:00.793Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-4807","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-04-23T13:27:06.574022Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-08-27T20:42:52.433Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SINEC NMS","versions":[{"status":"affected","version":"0","lessThan":"V3.0 SP1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-093430.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-331112.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:40:59.783Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:50.502Z"}}},"related_cves":[{"value":"CVE-2023-4807","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23250,"advisory_id":"da0f0de1-ed71-47f9-95a3-bc07867991ce","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3817","source_published_at":"2023-07-31T15:34:13.627+00:00","published_at":"2026-10-25T06:15:30.023513+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-3817"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Excessive time spent checking DH q parameter value","summary":"Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the \"-check\" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.","evidence":"cve:CVE-2023-3817","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-3817","aliases":["CVE-2023-3817"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.2","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.10","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1v","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zi","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T21:13:47.977Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230731.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230731.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5","name":"3.1.2 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f","name":"3.0.10 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5","name":"1.1.1v git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644","name":"1.0.2zi patch (premium)","tags":["patch","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Jul/43","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/31/1","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0014/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/9","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/11","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0008/","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/11/06/2","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T07:08:50.496Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-3817","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:26:20.624850Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T15:53:49.014Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T21:13:47.977Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:48.907Z"}}},"related_cves":[{"value":"CVE-2023-3817","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23223,"advisory_id":"8f890259-06b4-4e01-ad59-bfa8979070ee","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3446","source_published_at":"2023-07-19T11:31:34.994+00:00","published_at":"2026-10-25T06:15:12.634614+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-3446"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Excessive time spent checking DH keys and parameters","summary":"Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this ","evidence":"cve:CVE-2023-3446","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-3446","aliases":["CVE-2023-3446"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.2","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.10","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1v","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zi","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T20:55:30.042Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230719.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230719.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23","name":"3.1.2 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb","name":"3.0.10 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528","name":"1.1.1v git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c","name":"1.0.2zi patch (premium)","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/4","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/5","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/19/6","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/07/31/1","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230803-0011/","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/05/16/1","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:55:03.577Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-3446","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:26:22.087194Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-04-23T16:20:00.400Z"}},{"affected":[{"vendor":"Siemens","product":"SIDIS Prime","versions":[{"status":"affected","version":"0","lessThan":"V4.0.700","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-277137.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:55:30.042Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-10-14T14:55:47.238Z"}}},"related_cves":[{"value":"CVE-2023-3446","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23155,"advisory_id":"72a6cdfa-2eba-4f1c-a96b-d59e5c650290","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-2650","source_published_at":"2023-05-30T13:40:11.963+00:00","published_at":"2026-10-25T06:14:30.132208+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-2650"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Possible DoS translating ASN.1 object identifiers","summary":"Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may lead to a Denial of Service. An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit. OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by periods. When one of the sub-identifiers in the OBJECT IDENTIFIER is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the translation to a decimal number in text may take a very long time. The time complexity is O(n^2) with 'n' being the size of the sub-identifiers in bytes (*). With OpenSSL 3.0, support to fetch cryptographic algorithms using names / identifiers in string form was introduced. This includes using OBJECT IDENTIFIERs in canonical numeric text form as identifiers for fetching algorithms. Such OBJECT IDENTIFIERs may be received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to specify what cryptographic algorithm should be used","evidence":"cve:CVE-2023-2650","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-2650","aliases":["CVE-2023-2650"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/general/security-policy.html","content":{"text":"Moderate"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.1","lessThan":"3.1.1","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.9","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1u","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T20:28:44.585Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230530.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","https://www.debian.org/security/2023/dsa-5417","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","https://security.netapp.com/advisory/ntap-20230703-0001/","https://security.netapp.com/advisory/ntap-20231027-0009/","https://security.gentoo.org/glsa/202402-08"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230530.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a","name":"3.1.1 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b","name":"3.0.9 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098","name":"1.1.1u git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c","name":"1.0.2zh patch (premium)","tags":["patch","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/05/30/1","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5417","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","tags":["x_transferred"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230703-0001/","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0009/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:26:09.899Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-2650","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-06T15:55:48.363375Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-770","description":"CWE-770 Allocation of Resources Without Limits or Throttling"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-19T15:25:32.613Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-699386.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:28:44.585Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-02-04T09:06:37.503Z"}}},"related_cves":[{"value":"CVE-2023-2650","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23120,"advisory_id":"1205a385-c23a-4c2a-965a-e9592a2bf571","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-0466","source_published_at":"2023-03-28T14:30:49.595+00:00","published_at":"2026-10-25T06:13:14.409235+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-0466"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Certificate policy check not enabled","summary":"The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function. Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument. Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications.","evidence":"cve:CVE-2023-0466","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0466","aliases":["CVE-2023-0466"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.1","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.9","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1u","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T20:07:40.980Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230328.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230328.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061","name":"3.1.1 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908","name":"3.0.9 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a","name":"1.1.1u git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72","name":"1.0.2zh patch (premium)","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5417","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T05:10:56.167Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-0466","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-02-19T17:11:17.280968Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-19T17:12:25.801Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:07:40.980Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-02-04T09:06:28.377Z"}}},"related_cves":[{"value":"CVE-2023-0466","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23117,"advisory_id":"fee0c930-97a0-4246-9418-9c466d390b5e","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-0465","source_published_at":"2023-03-28T14:30:39.707+00:00","published_at":"2026-10-25T06:13:12.666599+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-0465"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Invalid certificate policies in leaf certificates are silently ignored","summary":"Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.","evidence":"cve:CVE-2023-0465","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0465","aliases":["CVE-2023-0465"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.1","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.9","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1u","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:54:20.864Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230328.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","https://security.netapp.com/advisory/ntap-20230414-0001/","https://www.debian.org/security/2023/dsa-5417","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.openssl.org/news/secadv/20230328.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c","name":"3.1.1 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb","name":"3.0.9 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95","name":"1.1.1u git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a","name":"1.0.2zh patch (premium)","tags":["patch","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230414-0001/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5417","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T05:10:56.368Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-0465","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-02-18T20:12:09.117445Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-18T20:12:50.266Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T19:54:20.864Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-02-04T09:06:54.698Z"}}},"related_cves":[{"value":"CVE-2023-0465","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}},{"id":23085,"advisory_id":"5f7574a3-0980-48d1-8faa-1a960dc4bfae","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-0464","source_published_at":"2023-03-22T16:36:47.383+00:00","published_at":"2026-10-25T06:12:53.709902+00:00","extraction_method":"structured","technologies":["core-cve","openssl"],"cve_ids":["CVE-2023-0464"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Excessive Resource Usage Verifying X.509 Policy Constraints","summary":"A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.","evidence":"cve:CVE-2023-0464","products":[{"name":{"value":"OpenSSL","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-0464","aliases":["CVE-2023-0464"],"metrics":[{"other":{"type":"https://www.openssl.org/policies/secpolicy.html","content":{"text":"Low"}},"format":"other"}],"affected":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[{"status":"affected","version":"3.1.0","lessThan":"3.1.1","versionType":"semver"},{"status":"affected","version":"3.0.0","lessThan":"3.0.9","versionType":"semver"},{"status":"affected","version":"1.1.1","lessThan":"1.1.1u","versionType":"custom"},{"status":"affected","version":"1.0.2","lessThan":"1.0.2zh","versionType":"custom"}],"defaultStatus":"unaffected"}],"modified":"2026-10-14T19:41:20.251Z","provider":"cve","references":["https://www.openssl.org/news/secadv/20230322.txt","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","https://www.couchbase.com/alerts/","https://www.debian.org/security/2023/dsa-5417","https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","https://security.gentoo.org/glsa/202402-08","https://security.netapp.com/advisory/ntap-20240621-0006/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.netapp.com/advisory/ntap-20230406-0006/"},{"url":"https://www.openssl.org/news/secadv/20230322.txt","name":"OpenSSL Advisory","tags":["vendor-advisory","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","name":"3.1.1 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","name":"3.0.9 git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","name":"1.1.1u git commit","tags":["patch","x_transferred"]},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","name":"1.0.2zh patch (premium)","tags":["patch","x_transferred"]},{"url":"https://www.couchbase.com/alerts/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5417","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-08","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T05:10:56.350Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.5,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-0464","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-04-23T13:26:32.875761Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-05-05T16:08:48.783Z"}},{"affected":[{"vendor":"Siemens","product":"BFCClient","versions":[{"status":"affected","version":"0","lessThan":"V2.17","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-077170.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T19:41:20.251Z"}}],"cna":{"orgId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","shortName":"openssl","dateUpdated":"2024-06-21T19:07:07.428Z"}}},"related_cves":[{"value":"CVE-2023-0464","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null}}],"next_after":29878,"next_before":23085}