cbcvebase.
CVE-2023-0465
published 2023-03-28

CVE-2023-0465: Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid…

PriorityP427medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
1.58%
73.0th percentile
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Affected

45 ranges· showing 25
VendorProductVersion rangeFixed in
debianopenssl< openssl 3.0.9-1 (bookworm)openssl 3.0.9-1 (bookworm)
msrcazl3_edk2_20230301gitf80f052277c8-37_on_azure_linux_3.0
msrcazl3_rust_1.75.0-14_on_azure_linux_3.0
msrcazl3_rust_1.86.0-1_on_azure_linux_3.0
msrcazure_linux_3.0_arm
msrcazure_linux_3.0_x64
msrccbl2_edk2_20230301gitf80f052277c8-37_on_cbl_mariner_2.0
msrccbl2_hvloader_1.0.1-11_on_cbl_mariner_2.0
msrccbl2_hvloader_1.0.1-9_on_cbl_mariner_2.0
msrccbl2_kata-containers-cc_0.4.1-2_on_cbl_mariner_2.0
msrccbl2_openssl_1.1.1k-23_on_cbl_mariner_2.0
msrccbl2_qemu_6.2.0-24_on_cbl_mariner_2.0
msrccbl_mariner_1.0_arm
msrccbl_mariner_1.0_x64
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
msrccm1_openssl_1.1.1k-15_on_cbl_mariner_1.0
opensslopenssl>= 0 < 1.1.1t-r21.1.1t-r2
opensslopenssl>= 0 < 1.1.1t-r21.1.1t-r2
opensslopenssl>= 0 < 1.1.1t-r21.1.1t-r2
opensslopenssl>= 0 < 3.0.8-r23.0.8-r2
opensslopenssl>= 0 < 3.1.0-r23.1.0-r2
opensslopenssl>= 0 < 3.1.0-r23.1.0-r2
opensslopenssl>= 0 < 3.1.0-r23.1.0-r2
opensslopenssl>= 0 < 3.1.0-r23.1.0-r2

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
osv7.5HIGH
vendor_ubuntu7.5HIGH
vendor_debian5.3MEDIUM
vendor_msrc5.3MEDIUM
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.