UpHeron
All vulnerabilities

Servers and applications

CVE-2023-0466

The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was…

Severity
Medium 5.3
Published
28 Mar 2023
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2zh
  • From 1.1.1 before 1.1.1u
  • From 3.0.0 before 3.0.9
  • From 3.1.0 before 3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-0466
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-0466