CVE-2023-0286 @ morris
Status
new
Priority
6.9
Match score
4.0
Risk
DoS
Remote
priv:user
CVSS
7.4 HIGH
Reason
cpe: openssl; pkgs: openssl, openssl-devel, openssl-libs; version: in-range: openssl-1.0.2u-1.el7.cloudlinux, openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5, openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5; risk:dos
Created
2026-10-15T10:20:22Z
Updated
2026-10-20T10:18:33Z
Package interrogation (copy)
Run on the host — click to copy a command. RPM
| Package | Commands |
|---|---|
| openssl-1.0.2u-1.el7.cloudlinux | |
| openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5 | |
| openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5 | |
| openssl-devel | |
| alt-openssl-1.0.2u-4.el7 | |
| alt-openssl11-1.1.1w-3.9.el7 | |
| alt-openssl11-libs-1.1.1w-3.9.el7 | |
| alt-openssl-libs-1.0.2u-4.el7 | |
| alt-python27-pyOpenSSL-0.10-2.el7.cloudlinux.2 | |
| alt-python37-pyOpenSSL-17.3.0-3.el7 | |
| ea-openssl-1.0.2u-1.el7.cloudlinux | |
| ea-openssl11-1.1.1w-10.el7.tuxcare.els | |
| ea-openssl11-devel-1.1.1w-10.el7.tuxcare.els | |
| ea-openssl-devel-1.0.2u-1.el7.cloudlinux | |
| ea-ruby27-rubygem-openssl-27.2.7.8.2.1.4-6.el7.cloudlinux | |
| imunify360-webshield-openssl-3.5.6-2.el7 | |
| jetphp71-openssl-7.1.22.1-1 | |
| jetphp73-openssl-7.3.26.4-3 | |
| openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5 | |
| pyOpenSSL-0.13.1-4.el7 |
Inventory lookup
Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.
Suggestions: openssl · openssl-libs · openssl-devel
| System | Matches | Ticket for CVE-2023-0286 | |
|---|---|---|---|
| morris | ea-openssl-devel 1.0.2u; openssl-devel 1.0.2k | new open | |
| mufasa | openssl-devel 1.0.2k | new open |
Same product CVEs in your queue
Other open tickets that look like the same product. Closed tickets are omitted unless they are already pegged to this CVE.
| CVE | CVSS | KEV | Systems | Status | Matched | Already related | |
|---|---|---|---|---|---|---|---|
| CVE-2021-20232 | 9.8 | Saiph | new | openssl | — | ||
| CVE-2021-20231 | 9.8 | Saiph | new | openssl | — | ||
| CVE-2023-4807 | 7.8 | Archive, Janus, Saiph | new | openssl | — | ||
| CVE-2022-0778 | 7.5 | Library, morris, mufasa | new | openssl | — | ||
| CVE-2023-0215 | 7.5 | Archive, Janus, Saiph, morris, mufasa | new | openssl-devel | — | ||
| CVE-2023-0464 | 7.5 | Archive, Janus, Saiph, morris, mufasa | new | openssl-devel | — | ||
| CVE-2024-0553 | 7.5 | Library, Saiph | new | openssl | — | ||
| CVE-2020-24659 | 7.5 | Library, Saiph | new | openssl | — | ||
| CVE-2022-2509 | 7.5 | Library, Saiph | new | openssl | — | ||
| CVE-2022-4450 | 7.5 | Archive, Janus, Saiph | new | openssl | — | ||
| CVE-2020-13777 | 7.4 | Saiph | new | openssl | — | ||
| CVE-2022-2068 | 7.3 | Archive, Janus, Saiph, morris, mufasa | new | openssl-devel | — | ||
| CVE-2022-1292 | 7.3 | Archive, Janus, Saiph, morris, mufasa | new | openssl-devel | — |
Related CVE (same fix)
Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.
Host OS / kernel
OS
CloudLinux release 7.9 (Boris Yegorov)
(7.9)
· cloudlinux
Arch
x86_64
kernel_release
uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64kernel_version
uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.
Same CVE on other hosts
Open the ticket for this CVE on another system.
| System | Status | Priority | Updated | |
|---|---|---|---|---|
| mufasa | new | 6.9 | 2026-10-20T10:18:33Z | Open |
| Archive | new | 0.61 | 2026-10-20T10:18:33Z | Open |
| Janus | new | 0.61 | 2026-10-20T10:18:33Z | Open |
| Saiph | new | 0.61 | 2026-10-20T10:18:33Z | Open |
Description
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.
Update status
Add note only
References
- https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
- https://security.gentoo.org/glsa/202402-08
- https://www.openssl.org/news/secadv/20230207.txt
- https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003
- https://security.gentoo.org/glsa/202402-08
- https://www.openssl.org/news/secadv/20230207.txt
NVD: CVE-2023-0286