CVE-2023-0286 @ Archive

Status

new

Priority

0.61

Match score

4.0

Risk

DoS Remote priv:user

CVSS

7.4 HIGH

Reason

cpe: openssl; pkgs: openssl; version: in-range: openssl-1.1.1n-0+deb10u6; risk:dos

Created

2026-10-15T10:20:21Z

Updated

2026-10-20T10:18:33Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

Package	Commands
openssl-1.1.1n-0+deb10u6
libxmlsec1-openssl-1.2.27-2

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: openssl

Same product CVEs in your queue

Other open tickets that look like the same product. Closed tickets are omitted unless they are already pegged to this CVE.

CVE	CVSS	Systems	Status	Matched	Already related
CVE-2021-20232	9.8	Saiph	new	openssl	—
CVE-2021-20231	9.8	Saiph	new	openssl	—
CVE-2023-4807	7.8	Archive, Janus, Saiph	new	openssl	—
CVE-2022-0778	7.5	Library, morris, mufasa	new	openssl	—
CVE-2023-0215	7.5	Archive, Janus, Saiph, morris, mufasa	new	openssl	—
CVE-2023-0464	7.5	Archive, Janus, Saiph, morris, mufasa	new	openssl	—
CVE-2024-0553	7.5	Library, Saiph	new	openssl	—
CVE-2020-24659	7.5	Library, Saiph	new	openssl	—
CVE-2022-2509	7.5	Library, Saiph	new	openssl	—
CVE-2022-4450	7.5	Archive, Janus, Saiph	new	openssl	—
CVE-2020-13777	7.4	Saiph	new	openssl	—
CVE-2022-2068	7.3	Archive, Janus, Saiph, morris, mufasa	new	openssl	—
CVE-2022-1292	7.3	Archive, Janus, Saiph, morris, mufasa	new	openssl	—

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

Debian GNU/Linux 10 (buster) (10) · debian

Arch

x86_64

kernel_release

uname -r → 5.10.0-25-amd64

kernel_version

uname -v → #1 SMP Debian 5.10.191-1 (2023-08-16)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	new	6.9	2026-10-20T10:18:33Z	Open
mufasa	new	6.9	2026-10-20T10:18:33Z	Open
Janus	new	0.61	2026-10-20T10:18:33Z	Open
Saiph	new	0.61	2026-10-20T10:18:33Z	Open

Description

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.

Update status