CVE-2023-0464 @ Saiph

"CVE-2023-0464"
"openssl-1.1.1n-0+deb10u6"
"libgnutls-openssl27-3.6.7-4+deb10u12"
"libxmlsec1-openssl-1.2.27-2"
"Am I vulnerable?"

Status

not_applicable

Priority

0.62

Match score

4.0

Risk

DoS Remote

CVSS

7.5 HIGH

Reason

cpe: openssl; pkgs: openssl; version: in-range: openssl-1.1.1n-0+deb10u6; risk:dos

Created

2026-10-20T18:18:00Z

Updated

2026-10-21T16:44:11Z

Closed

2026-10-20T18:40:42Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

Package	Commands
openssl-1.1.1n-0+deb10u6
libgnutls-openssl27-3.6.7-4+deb10u12
libxmlsec1-openssl-1.2.27-2

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: openssl

System	Matches	Ticket for CVE-2023-0464
Archive	libxmlsec1-openssl 1.2.27-2; openssl 1.1.1n-0+deb10u6	not_applicable open
Janus	openssl 1.1.1n-0+deb10u6	not_applicable open
Saiph	libgnutls-openssl27 3.6.7-4+deb10u12; libxmlsec1-openssl 1.2.27-2; openssl 1.1.1n-0+deb10u6	not_applicable open
morris	alt-openssl 1.0.2u; alt-openssl-libs 1.0.2u; alt-openssl11 1.1.1w; alt-openssl11-libs 1.1.1w; alt-python27-pyOpenSSL 0.10; alt-python37-pyOpenSSL 17.3.0; cpanel-perl-536-crypt-openssl-bignum 0.09; cpanel-perl-536-crypt-openssl-dsa 0.20 (+16 more)	not_applicable open
mufasa	alt-openssl 1.0.2u; alt-openssl-libs 1.0.2u; alt-openssl11 1.1.1w; alt-openssl11-libs 1.1.1w; alt-python37-pyOpenSSL 17.3.0; cpanel-perl-536-crypt-openssl-bignum 0.09; cpanel-perl-536-crypt-openssl-dsa 0.20; cpanel-perl-536-crypt-openssl-ec 1.32 (+11 more)	not_applicable open
Bullseye	libxmlsec1-openssl 1.2.31-1; openssl 1.1.1w-0+deb11u8	none
Helios	openssl 1.1.1w-0+deb11u8	none
Library	libgnutls-openssl27 3.5.8-5+deb9u6; openssl 1.1.0l-1~deb9u6	none
Matrix	libxmlsec1-openssl 1.2.37-2; openssl 3.0.22-1~deb12u1; perl-openssl-defaults 7+b1	none
Silk	alt-openssl 1.1.1w-3.5; alt-openssl-libs 1.1.1w-3.5; alt-openssl11-libs 1.1.1w-3.11; imunify360-webshield-openssl 3.5.6-2; libxmlsec1-openssl 1.2.37-2; openssl 3.0.22-1~deb12u1; perl-openssl-defaults 7+b1; python3-openssl 23.0.0-1	none

Related CVE (same fix)

This CVE is subordinated to primary CVE-2022-2068 — same product as CVE-2022-2068

Host OS / kernel

Debian GNU/Linux 10 (buster) (10) · debian

Arch

x86_64

kernel_release

uname -r → 4.19.0-27-amd64

kernel_version

uname -v → #1 SMP Debian 4.19.316-1 (2024-06-25)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	not_applicable	7.0	2026-10-21T16:44:11Z	Open
mufasa	not_applicable	7.0	2026-10-21T16:44:11Z	Open
Archive	not_applicable	0.62	2026-10-21T16:44:11Z	Open
Janus	not_applicable	0.62	2026-10-21T16:44:11Z	Open

Description

A security vulnerability has been identified in all supported versions

of OpenSSL related to the verification of X.509 certificate chains
that include policy constraints.  Attackers may be able to exploit this
vulnerability by creating a malicious certificate chain that triggers
exponential use of computational resources, leading to a denial-of-service
(DoS) attack on affected systems.

Policy processing is disabled by default but can be enabled by passing
the `-policy' argument to the command line utilities or by calling the
`X509_VERIFY_PARAM_set1_policies()' function.

Determination

Related to primary CVE-2022-2068: same product as CVE-2022-2068

Update status

Add note only

Mitigation log

2026-10-20T18:40:42Z — not_applicable

Related to primary CVE-2022-2068: same product as CVE-2022-2068

References

NVD: CVE-2023-0464