UpHeron
All vulnerabilities

Servers and applications

CVE-2023-0464

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy…

Severity
High 7.5
Published
22 Mar 2023
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2zh
  • From 1.1.1 before 1.1.1u
  • From 3.0.0 before 3.0.9
  • From 3.1.0 before 3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-0464
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-0464