csaf_microsoft - msrc

msrc_cve-2023-0215

Vulnerability from csaf_microsoft

Published

2023-02-01 00:00

Modified

2024-08-15 00:00

Summary

Use-after-free following BIO_new_NDEF

Notes

Additional Resources

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer

The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2023-0215 Use-after-free following BIO_new_NDEF - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-0215.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Use-after-free following BIO_new_NDEF",
    "tracking": {
      "current_release_date": "2024-08-15T00:00:00.000Z",
      "generator": {
        "date": "2025-10-20T00:15:36.617Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2023-0215",
      "initial_release_date": "2023-02-01T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-02-13T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2023-02-14T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added openssl to CBL-Mariner 2.0\nAdded openssl to CBL-Mariner 1.0"
        },
        {
          "date": "2024-04-06T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added hvloader to CBL-Mariner 2.0"
        },
        {
          "date": "2024-06-30T07:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Information published."
        },
        {
          "date": "2024-08-15T00:00:00.000Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              },
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 shim-unsigned-x64 15.4-2",
                "product": {
                  "name": "\u003ccm1 shim-unsigned-x64 15.4-2",
                  "product_id": "9"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 shim-unsigned-x64 15.4-2",
                "product": {
                  "name": "cm1 shim-unsigned-x64 15.4-2",
                  "product_id": "17978"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 shim-unsigned-x64 15.8-1",
                "product": {
                  "name": "\u003ccbl2 shim-unsigned-x64 15.8-1",
                  "product_id": "7"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 shim-unsigned-x64 15.8-1",
                "product": {
                  "name": "cbl2 shim-unsigned-x64 15.8-1",
                  "product_id": "17980"
                }
              }
            ],
            "category": "product_name",
            "name": "shim-unsigned-x64"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 shim-unsigned-aarch64 15-5",
                "product": {
                  "name": "\u003ccm1 shim-unsigned-aarch64 15-5",
                  "product_id": "8"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 shim-unsigned-aarch64 15-5",
                "product": {
                  "name": "cm1 shim-unsigned-aarch64 15-5",
                  "product_id": "17979"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 shim-unsigned-aarch64 15-5",
                "product": {
                  "name": "\u003ccbl2 shim-unsigned-aarch64 15-5",
                  "product_id": "6"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 shim-unsigned-aarch64 15-5",
                "product": {
                  "name": "cbl2 shim-unsigned-aarch64 15-5",
                  "product_id": "17981"
                }
              }
            ],
            "category": "product_name",
            "name": "shim-unsigned-aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 rust 1.59.0-1",
                "product": {
                  "name": "\u003ccm1 rust 1.59.0-1",
                  "product_id": "14"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 rust 1.59.0-1",
                "product": {
                  "name": "cm1 rust 1.59.0-1",
                  "product_id": "17941"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 rust 1.68.2-5",
                "product": {
                  "name": "\u003ccbl2 rust 1.68.2-5",
                  "product_id": "12"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 rust 1.68.2-5",
                "product": {
                  "name": "cbl2 rust 1.68.2-5",
                  "product_id": "17944"
                }
              }
            ],
            "category": "product_name",
            "name": "rust"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 openssl 1.1.1k-13",
                "product": {
                  "name": "\u003ccm1 openssl 1.1.1k-13",
                  "product_id": "13"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 openssl 1.1.1k-13",
                "product": {
                  "name": "cm1 openssl 1.1.1k-13",
                  "product_id": "17942"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 openssl 1.1.1k-21",
                "product": {
                  "name": "\u003ccbl2 openssl 1.1.1k-21",
                  "product_id": "11"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 openssl 1.1.1k-21",
                "product": {
                  "name": "cbl2 openssl 1.1.1k-21",
                  "product_id": "17945"
                }
              }
            ],
            "category": "product_name",
            "name": "openssl"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 cloud-hypervisor 22.0-2",
                "product": {
                  "name": "\u003ccm1 cloud-hypervisor 22.0-2",
                  "product_id": "16"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 cloud-hypervisor 22.0-2",
                "product": {
                  "name": "cm1 cloud-hypervisor 22.0-2",
                  "product_id": "17918"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 cloud-hypervisor 30.0-2",
                "product": {
                  "name": "\u003ccbl2 cloud-hypervisor 30.0-2",
                  "product_id": "15"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 cloud-hypervisor 30.0-2",
                "product": {
                  "name": "cbl2 cloud-hypervisor 30.0-2",
                  "product_id": "17919"
                }
              }
            ],
            "category": "product_name",
            "name": "cloud-hypervisor"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 hvloader 1.0.1-4",
                "product": {
                  "name": "\u003cazl3 hvloader 1.0.1-4",
                  "product_id": "10"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 hvloader 1.0.1-4",
                "product": {
                  "name": "azl3 hvloader 1.0.1-4",
                  "product_id": "17946"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 hvloader 1.0.1-2",
                "product": {
                  "name": "\u003ccbl2 hvloader 1.0.1-2",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 hvloader 1.0.1-2",
                "product": {
                  "name": "cbl2 hvloader 1.0.1-2",
                  "product_id": "20011"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003cazl3 hvloader 1.0.1-2",
                "product": {
                  "name": "\u003cazl3 hvloader 1.0.1-2",
                  "product_id": "5"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 hvloader 1.0.1-2",
                "product": {
                  "name": "azl3 hvloader 1.0.1-2",
                  "product_id": "18666"
                }
              }
            ],
            "category": "product_name",
            "name": "hvloader"
          },
          {
            "category": "product_name",
            "name": "azl3 shim-unsigned-aarch64 15.8-5",
            "product": {
              "name": "azl3 shim-unsigned-aarch64 15.8-5",
              "product_id": "18"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 shim-unsigned-x64 15.8-5",
            "product": {
              "name": "azl3 shim-unsigned-x64 15.8-5",
              "product_id": "19"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 rust 1.75.0-14",
            "product": {
              "name": "azl3 rust 1.75.0-14",
              "product_id": "3"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 edk2 20230301gitf80f052277c8-37",
            "product": {
              "name": "azl3 edk2 20230301gitf80f052277c8-37",
              "product_id": "17"
            }
          },
          {
            "category": "product_name",
            "name": "cbl2 qemu 6.2.0-24",
            "product": {
              "name": "cbl2 qemu 6.2.0-24",
              "product_id": "4"
            }
          },
          {
            "category": "product_name",
            "name": "azl3 rust 1.86.0-1",
            "product": {
              "name": "azl3 rust 1.86.0-1",
              "product_id": "2"
            }
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 shim-unsigned-aarch64 15.8-5 as a component of Azure Linux 3.0",
          "product_id": "17084-18"
        },
        "product_reference": "18",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 shim-unsigned-x64 15.8-5 as a component of Azure Linux 3.0",
          "product_id": "17084-19"
        },
        "product_reference": "19",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.75.0-14 as a component of Azure Linux 3.0",
          "product_id": "17084-3"
        },
        "product_reference": "3",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 shim-unsigned-x64 15.4-2 as a component of CBL Mariner 1.0",
          "product_id": "16820-9"
        },
        "product_reference": "9",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 shim-unsigned-x64 15.4-2 as a component of CBL Mariner 1.0",
          "product_id": "17978-16820"
        },
        "product_reference": "17978",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 shim-unsigned-aarch64 15-5 as a component of CBL Mariner 1.0",
          "product_id": "16820-8"
        },
        "product_reference": "8",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 shim-unsigned-aarch64 15-5 as a component of CBL Mariner 1.0",
          "product_id": "17979-16820"
        },
        "product_reference": "17979",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 rust 1.59.0-1 as a component of CBL Mariner 1.0",
          "product_id": "16820-14"
        },
        "product_reference": "14",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 rust 1.59.0-1 as a component of CBL Mariner 1.0",
          "product_id": "17941-16820"
        },
        "product_reference": "17941",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 openssl 1.1.1k-13 as a component of CBL Mariner 1.0",
          "product_id": "16820-13"
        },
        "product_reference": "13",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 openssl 1.1.1k-13 as a component of CBL Mariner 1.0",
          "product_id": "17942-16820"
        },
        "product_reference": "17942",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 cloud-hypervisor 22.0-2 as a component of CBL Mariner 1.0",
          "product_id": "16820-16"
        },
        "product_reference": "16",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 cloud-hypervisor 22.0-2 as a component of CBL Mariner 1.0",
          "product_id": "17918-16820"
        },
        "product_reference": "17918",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 openssl 1.1.1k-21 as a component of CBL Mariner 2.0",
          "product_id": "17086-11"
        },
        "product_reference": "11",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 openssl 1.1.1k-21 as a component of CBL Mariner 2.0",
          "product_id": "17945-17086"
        },
        "product_reference": "17945",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 shim-unsigned-x64 15.8-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-7"
        },
        "product_reference": "7",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 shim-unsigned-x64 15.8-1 as a component of CBL Mariner 2.0",
          "product_id": "17980-17086"
        },
        "product_reference": "17980",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 shim-unsigned-aarch64 15-5 as a component of CBL Mariner 2.0",
          "product_id": "17086-6"
        },
        "product_reference": "6",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 shim-unsigned-aarch64 15-5 as a component of CBL Mariner 2.0",
          "product_id": "17981-17086"
        },
        "product_reference": "17981",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 rust 1.68.2-5 as a component of CBL Mariner 2.0",
          "product_id": "17086-12"
        },
        "product_reference": "12",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 rust 1.68.2-5 as a component of CBL Mariner 2.0",
          "product_id": "17944-17086"
        },
        "product_reference": "17944",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 cloud-hypervisor 30.0-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-15"
        },
        "product_reference": "15",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 cloud-hypervisor 30.0-2 as a component of CBL Mariner 2.0",
          "product_id": "17919-17086"
        },
        "product_reference": "17919",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 hvloader 1.0.1-4 as a component of Azure Linux 3.0",
          "product_id": "17084-10"
        },
        "product_reference": "10",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 hvloader 1.0.1-4 as a component of Azure Linux 3.0",
          "product_id": "17946-17084"
        },
        "product_reference": "17946",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 edk2 20230301gitf80f052277c8-37 as a component of Azure Linux 3.0",
          "product_id": "17084-17"
        },
        "product_reference": "17",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 hvloader 1.0.1-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 hvloader 1.0.1-2 as a component of CBL Mariner 2.0",
          "product_id": "20011-17086"
        },
        "product_reference": "20011",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 hvloader 1.0.1-2 as a component of Azure Linux 3.0",
          "product_id": "17084-5"
        },
        "product_reference": "5",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 hvloader 1.0.1-2 as a component of Azure Linux 3.0",
          "product_id": "18666-17084"
        },
        "product_reference": "18666",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 qemu 6.2.0-24 as a component of CBL Mariner 2.0",
          "product_id": "17086-4"
        },
        "product_reference": "4",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 rust 1.86.0-1 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-0215",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "flags": [
        {
          "label": "vulnerable_code_not_in_execute_path",
          "product_ids": [
            "17084-3",
            "17084-2"
          ]
        },
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "17084-18",
            "17084-19",
            "17084-17",
            "17086-4"
          ]
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "openssl",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "17978-16820",
          "17979-16820",
          "17941-16820",
          "17942-16820",
          "17918-16820",
          "17945-17086",
          "17980-17086",
          "17981-17086",
          "17944-17086",
          "17919-17086",
          "17946-17084",
          "20011-17086",
          "18666-17084"
        ],
        "known_affected": [
          "16820-9",
          "16820-8",
          "16820-14",
          "16820-13",
          "16820-16",
          "17086-11",
          "17086-7",
          "17086-6",
          "17086-12",
          "17086-15",
          "17084-10",
          "17086-1",
          "17084-5"
        ],
        "known_not_affected": [
          "17084-18",
          "17084-19",
          "17084-3",
          "17084-17",
          "17086-4",
          "17084-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-0215 Use-after-free following BIO_new_NDEF - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-0215.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "15.4-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-9"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "15-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-8",
            "17086-6"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "1.59.0-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-14"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "-:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-13"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "22.0-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-16"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "1.1.1k-21:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-11"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "15.8-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-7"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "1.68.2-5:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-12"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "30.0-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-15"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "1.0.1-4:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17084-10",
            "17084-5"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2023-02-13T00:00:00.000Z",
          "details": "1.0.1-3:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-9",
            "16820-8",
            "16820-14",
            "16820-13",
            "16820-16",
            "17086-11",
            "17086-7",
            "17086-6",
            "17086-12",
            "17086-15",
            "17084-10",
            "17086-1",
            "17084-5"
          ]
        }
      ],
      "title": "Use-after-free following BIO_new_NDEF"
    }
  ]
}

CVE-2023-0215 (GCVE-0-2023-0215)

Vulnerability from cvelistv5

Published

2023-02-08 19:03

Modified

2025-08-27 20:32

Severity ?

CWE

use-after-free

Summary

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.

References

URL

Tags

	https://www.openssl.org/news/secadv/20230207.txt	vendor-advisory
	https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd	patch
	https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344	patch
	https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb	patch
	https://security.netapp.com/advisory/ntap-20230427-0007/
	https://security.netapp.com/advisory/ntap-20230427-0009/
	https://security.gentoo.org/glsa/202402-08
	https://security.netapp.com/advisory/ntap-20240621-0006/

Impacted products

	Vendor	Product	Version
	OpenSSL	OpenSSL	Version: 3.0.0 ≤ Version: 1.1.1 < 1.1.1t Version: 1.0.2 < 1.0.2zg

Show details on NVD website