ID CVE-2023-0216
Summary An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
References
Vulnerable Configurations
  • cpe:2.3:a:openssl:openssl:3.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha1:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha1:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha10:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha10:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha11:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha11:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha12:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha12:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha13:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha13:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha14:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha14:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha15:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha15:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha16:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha16:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha17:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha17:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha2:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha2:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha3:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha3:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha4:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha4:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha5:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha5:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha6:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha6:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha7:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha7:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha8:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha8:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:alpha9:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:alpha9:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:beta1:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:beta1:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:openssl:openssl:3.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:openssl:openssl:3.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:stormshield:stormshield_management_center:-:*:*:*:*:*:*:*
    cpe:2.3:a:stormshield:stormshield_management_center:-:*:*:*:*:*:*:*
  • cpe:2.3:a:stormshield:stormshield_management_center:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:stormshield:stormshield_management_center:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:stormshield:stormshield_management_center:3.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:stormshield:stormshield_management_center:3.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:stormshield:stormshield_management_center:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:stormshield:stormshield_management_center:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:stormshield:stormshield_management_center:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:stormshield:stormshield_management_center:3.3.2:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 04-02-2024 - 09:15
Published 08-02-2023 - 20:15
Last modified 04-02-2024 - 09:15
Back to Top