It was discovered that OpenSSL was not properly managing file locks when
processing policy constraints. If a user or automated system were tricked
into processing a certificate chain with specially crafted policy
constraints, a remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu
22.10. (CVE-2022-3996)
David Benjamin discovered that OpenSSL was not properly performing the
verification of X.509 certificate chains that include policy constraints,
which could lead to excessive resource consumption. If a user or automated
system were tricked into processing a specially crafted X.509 certificate
chain that includes policy constraints, a remote attacker could possibly
use this issue to cause a denial of service. (CVE-2023-0464)
David Benjamin discovered that OpenSSL was not properly handling invalid
certificate policies in leaf certificates, which would result in certain
policy checks being skipped for the certificate. If a user or automated
system were tricked into processing a specially crafted certificate, a
remote attacker could possibly use this issue to assert invalid
certificate policies and circumvent policy checking. (CVE-2023-0465)
David Benjamin discovered that OpenSSL incorrectly documented the
functionalities of function X509_VERIFY_PARAM_add0_policy, stating that
it would implicitly enable certificate policy checks when doing
certificate verifications, contrary to its implementation. This could
cause users and applications to not perform certificate policy checks
even when expected to do so. (CVE-2023-0466)
More Stories
kernel-6.3.7-100.fc37
FEDORA-2023-4426b7005f Packages in this update: kernel-6.3.7-100.fc37 Update description: The 6.3.7 stable kernel update contains a number of important fixes across...
kernel-6.3.7-200.fc38
FEDORA-2023-75b22000cd Packages in this update: kernel-6.3.7-200.fc38 Update description: The 6.3.7 stable kernel update contains a number of important fixes across...
chromium-114.0.5735.106-1.fc38
FEDORA-2023-6fe7ff3452 Packages in this update: chromium-114.0.5735.106-1.fc38 Update description: update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709 Read More
chromium-114.0.5735.106-1.el8
FEDORA-EPEL-2023-c018b37680 Packages in this update: chromium-114.0.5735.106-1.el8 Update description: update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709 Read More
chromium-114.0.5735.106-1.fc37
FEDORA-2023-f4954af225 Packages in this update: chromium-114.0.5735.106-1.fc37 Update description: update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709 Read More
chromium-114.0.5735.106-1.el9
FEDORA-EPEL-2023-5b8cf596eb Packages in this update: chromium-114.0.5735.106-1.el9 Update description: update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709 Read More