CVE catalog
CVE-2022-4304
EDK II vulnerabilities
- Severity
- Medium · CVSS 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 23.51% · Oct 22, 2026
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | fixed |
| Ubuntu | openssl | noble | 3.0.8-1 | fixed |
| Ubuntu | edk2 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-aa64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | efi-shell-x64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | ovmf-ia32 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-aarch64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-arm | noble | 2024.02-2ubuntu0.6 | fixed |
| Ubuntu | qemu-efi-riscv64 | noble | 2024.02-2ubuntu0.6 | fixed |
| Cpe | openssl | Not reported | 3.0.8 | fixed |
| Cpe | endpoint_security | Not reported | 7.2.40 | fixed |
| Cpe | sslvpn | Not reported | 3.2.1 | fixed |
| Cpe | stormshield_network_security | Not reported | 4.6.3 | fixed |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.2.8 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.fips.7.1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20190606.20d2e5a1-2ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20190828.37eef910-3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20190828.37eef910-4 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-1ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.1 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.2 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.3 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.4 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.5 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.6 | vulnerable |
| Ubuntu | edk2 | pro | 0~20191122.bd85bf54-2ubuntu3.6+esm1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2g-1ubuntu14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.0.2n-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.0g-2ubuntu4.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.1 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.2 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.3 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.4 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.5 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.6 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.7 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.8 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.9 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.10 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.13 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.14 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.15 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.17 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.19 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.20 | vulnerable |
| Ubuntu | openssl | 18.04 | 1.1.1-1ubuntu2.1~18.04.21 | fixed |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.6 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.7 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.8 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.9 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.10 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.11 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.12 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm6 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm7 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1c-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1d-2ubuntu6 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.2 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.3 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.4 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.5 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.8 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.9 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.10 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.11 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.12 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.13 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.15 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.16 | vulnerable |
| Ubuntu | openssl | 20.04 | 1.1.1f-1ubuntu2.17 | fixed |
| Ubuntu | edk2 | 22.04 | 2021.08~rc0-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.08-3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11~rc1-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2021.11-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02~rc1-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02~rc1-1ubuntu1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.1 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.2 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.3 | vulnerable |
| Ubuntu | edk2 | 22.04 | 2022.02-3ubuntu0.22.04.4 | fixed |
| Ubuntu | nodejs | 22.04 | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | fixed |
| Ubuntu | nodejs | 22.04 | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | fixed |
| Suse | openssl-1_1 | openstack cloud 9 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | openstack cloud crowbar 9 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 12 sp4 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise software development kit 12 sp5 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp4-espos | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp4-ltss | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp5 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 12 sp5 | 1.1.1d-2.89.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for basesystem 15 sp5 | 1.1.1l-150500.17.6.1 | fixed |
| Opensuse | openssl-1_1 | leap 15.5 | 1.1.1l-150500.17.6.1 | fixed |
| Opensuse | openssl-1_1 | tumbleweed | 1.1.1t-1.1 | fixed |
| Suse | openssl-1_1 | openstack cloud 9 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | openstack cloud crowbar 9 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 12 sp4 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise software development kit 12 sp5 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp4-ltss | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp5 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 12 sp5 | 1.1.1d-2.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp2-ltss | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp3-espos | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise real time 15 sp3 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp2-ltss | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | manager proxy 4.2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | manager retail branch server 4.2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | manager server 4.2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.1 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 7 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 7.1 | 1.1.1d-150200.11.57.1 | fixed |
| Opensuse | openssl-1_1 | leap micro 5.2 | 1.1.1d-150200.11.57.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7.1 | 1.0.2p-150000.3.65.1 | fixed |
| Opensuse | openssl-1_0_0 | leap 15.4 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.3 | 1.1.1l-150400.7.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.4 | 1.1.1l-150400.7.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for basesystem 15 sp4 | 1.1.1l-150400.7.42.1 | fixed |
| Opensuse | openssl-1_1 | leap micro 5.3 | 1.1.1l-150400.7.42.1 | fixed |
| Opensuse | openssl-1_1 | leap 15.4 | 1.1.1l-150400.7.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.42.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.3 | 1.1.1l-150400.7.22.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for basesystem 15 sp4 | 1.1.1l-150400.7.22.1 | fixed |
| Opensuse | openssl-1_1 | leap micro 5.3 | 1.1.1l-150400.7.22.1 | fixed |
| Opensuse | openssl-1_1 | leap 15.4 | 1.1.1l-150400.7.22.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.56.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.56.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.56.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud 9 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud crowbar 9 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise software development kit 12 sp5 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp4-espos | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp4-ltss | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp5 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.78.1 | fixed |
| Suse | openssl | linux enterprise server 11 sp4 ltss extreme core | 0.9.8j-0.106.60.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud 9 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | openstack cloud crowbar 9 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise software development kit 12 sp5 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp4-ltss | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp5 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.64.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp2-ltss | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp3-espos | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise real time 15 sp3 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp2-ltss | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp2 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | manager proxy 4.2 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | manager server 4.2 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.1 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.2 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 7 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 7.1 | 1.1.1d-150200.11.72.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp5 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7.1 | 1.0.2p-150000.3.79.1 | fixed |
| Opensuse | openssl-1_0_0 | leap 15.4 | 1.0.2p-150000.3.79.1 | fixed |
| Opensuse | openssl-1_0_0 | leap 15.5 | 1.0.2p-150000.3.79.1 | fixed |
| Suse | openssl1 | linux enterprise server 11 sp4 ltss extreme core | 1.0.1g-0.58.56.1 | fixed |
| Suse | compat-openssl098 | linux enterprise module for legacy 12 | 0.9.8j-106.58.1 | fixed |
| Suse | compat-openssl098 | linux enterprise server for sap applications 12 sp4 | 0.9.8j-106.58.1 | fixed |
| Suse | compat-openssl098 | linux enterprise server for sap applications 12 sp5 | 0.9.8j-106.58.1 | fixed |
| Suse | openssl | linux enterprise server 12 sp2-bcl | 1.0.2j-60.98.1 | fixed |
| Suse | openssl | linux enterprise server 12 sp2-bcl | 1.0.2j-60.86.1 | fixed |
| Suse | compat-openssl098 | linux enterprise module for legacy 12 | 0.9.8j-106.42.1 | fixed |
| Suse | compat-openssl098 | linux enterprise server for sap applications 12 sp4 | 0.9.8j-106.42.1 | fixed |
| Suse | compat-openssl098 | linux enterprise server for sap applications 12 sp5 | 0.9.8j-106.42.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7 | 1.0.2p-150000.3.65.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7.1 | 1.0.2p-150000.3.65.1 | fixed |
| Opensuse | openssl-1_0_0 | leap 15.4 | 1.0.2p-150000.3.65.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.8-1 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.8-1 | Not reported | Not reported | Not reported |
| Ubuntu | edk2 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-aa64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | efi-shell-x64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | ovmf-ia32 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-aarch64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-arm | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Ubuntu | qemu-efi-riscv64 | deb | noble | 2024.02-2ubuntu0.6 | Not reported | Not reported | Not reported |
| Cpe | openssl | cpe | Not reported | 3.0.8 | Not reported | NVD-CVE-2022-4304 | Not reported |
| Cpe | endpoint_security | cpe | Not reported | 7.2.40 | Not reported | NVD-CVE-2022-4304 | Not reported |
| Cpe | sslvpn | cpe | Not reported | 3.2.1 | Not reported | NVD-CVE-2022-4304 | Not reported |
| Cpe | stormshield_network_security | cpe | Not reported | 4.6.3 | Not reported | NVD-CVE-2022-4304 | Not reported |
| Ubuntu | openssl | deb | 18.04 | 1.1.1-1ubuntu2.1~18.04.21 | Not reported | UBUNTU-CVE-2022-4304 | Not reported |
| Ubuntu | openssl | deb | 20.04 | 1.1.1f-1ubuntu2.17 | Not reported | UBUNTU-CVE-2022-4304 | Not reported |
| Ubuntu | edk2 | deb | 22.04 | 2022.02-3ubuntu0.22.04.4 | Not reported | UBUNTU-CVE-2022-4304 | Not reported |
| Ubuntu | nodejs | deb | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | Not reported | UBUNTU-CVE-2022-4304 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.8 | Not reported | UBUNTU-CVE-2022-4304 | Not reported |
| Ubuntu | nodejs | deb | 22.04 | 12.22.9~dfsg-1ubuntu3.3 | Not reported | USN-6564-1 | Not reported |
| Suse | openssl-1_1 | rpm | openstack cloud 9 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | openstack cloud crowbar 9 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 12 sp4 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise software development kit 12 sp5 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp4-espos | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp4-ltss | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp5 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 12 sp5 | 1.1.1d-2.89.1 | Not reported | SUSE-SU-2023:2623-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for basesystem 15 sp5 | 1.1.1l-150500.17.6.1 | Not reported | SUSE-SU-2023:29171-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap 15.5 | 1.1.1l-150500.17.6.1 | Not reported | SUSE-SU-2023:29171-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | tumbleweed | 1.1.1t-1.1 | Not reported | OPENSUSE-SU-2024:12688-1 | Not reported |
| Suse | openssl-1_1 | rpm | openstack cloud 9 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | openstack cloud crowbar 9 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 12 sp4 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise software development kit 12 sp5 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp4-ltss | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp5 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 12 sp5 | 1.1.1d-2.75.1 | Not reported | SUSE-SU-2023:0309-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp2-ltss | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp3-espos | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise real time 15 sp3 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp2-ltss | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager proxy 4.2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager retail branch server 4.2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager server 4.2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.1 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 7 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 7.1 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap micro 5.2 | 1.1.1d-150200.11.57.1 | Not reported | SUSE-SU-2023:0310-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7.1 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Opensuse | openssl-1_0_0 | rpm | leap 15.4 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.3 | 1.1.1l-150400.7.42.1 | Not reported | SUSE-SU-2023:2648-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.4 | 1.1.1l-150400.7.42.1 | Not reported | SUSE-SU-2023:2648-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for basesystem 15 sp4 | 1.1.1l-150400.7.42.1 | Not reported | SUSE-SU-2023:2648-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap micro 5.3 | 1.1.1l-150400.7.42.1 | Not reported | SUSE-SU-2023:2648-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap 15.4 | 1.1.1l-150400.7.42.1 | Not reported | SUSE-SU-2023:2648-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.42.1 | Not reported | SUSE-SU-2023:0308-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.42.1 | Not reported | SUSE-SU-2023:0308-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.42.1 | Not reported | SUSE-SU-2023:0308-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.3 | 1.1.1l-150400.7.22.1 | Not reported | SUSE-SU-2023:0311-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for basesystem 15 sp4 | 1.1.1l-150400.7.22.1 | Not reported | SUSE-SU-2023:0311-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap micro 5.3 | 1.1.1l-150400.7.22.1 | Not reported | SUSE-SU-2023:0311-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap 15.4 | 1.1.1l-150400.7.22.1 | Not reported | SUSE-SU-2023:0311-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp1-ltss | 1.1.0i-150100.14.56.1 | Not reported | SUSE-SU-2023:2622-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp1-ltss | 1.1.0i-150100.14.56.1 | Not reported | SUSE-SU-2023:2622-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp1 | 1.1.0i-150100.14.56.1 | Not reported | SUSE-SU-2023:2622-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud 9 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud crowbar 9 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise software development kit 12 sp5 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp4-espos | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp4-ltss | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp5 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.78.1 | Not reported | SUSE-SU-2023:2624-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 11 sp4 ltss extreme core | 0.9.8j-0.106.60.1 | Not reported | SUSE-SU-2023:0584-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud 9 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | openstack cloud crowbar 9 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp4 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise software development kit 12 sp5 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp4-ltss | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp5 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 12 sp5 | 1.0.2p-3.64.1 | Not reported | SUSE-SU-2023:0306-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp2-ltss | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp3-espos | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise real time 15 sp3 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp2-ltss | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp2 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager proxy 4.2 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager server 4.2 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.1 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.2 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 7 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 7.1 | 1.1.1d-150200.11.72.1 | Not reported | SUSE-SU-2023:3179-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp5 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7.1 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Opensuse | openssl-1_0_0 | rpm | leap 15.4 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Opensuse | openssl-1_0_0 | rpm | leap 15.5 | 1.0.2p-150000.3.79.1 | Not reported | SUSE-SU-2023:2633-1 | Not reported |
| Suse | openssl1 | rpm | linux enterprise server 11 sp4 ltss extreme core | 1.0.1g-0.58.56.1 | Not reported | SUSE-SU-2023:0307-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise module for legacy 12 | 0.9.8j-106.58.1 | Not reported | SUSE-SU-2023:3096-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise server for sap applications 12 sp4 | 0.9.8j-106.58.1 | Not reported | SUSE-SU-2023:3096-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise server for sap applications 12 sp5 | 0.9.8j-106.58.1 | Not reported | SUSE-SU-2023:3096-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 12 sp2-bcl | 1.0.2j-60.98.1 | Not reported | SUSE-SU-2023:2634-1 | Not reported |
| Suse | openssl | rpm | linux enterprise server 12 sp2-bcl | 1.0.2j-60.86.1 | Not reported | SUSE-SU-2023:0684-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise module for legacy 12 | 0.9.8j-106.42.1 | Not reported | SUSE-SU-2023:0581-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise server for sap applications 12 sp4 | 0.9.8j-106.42.1 | Not reported | SUSE-SU-2023:0581-1 | Not reported |
| Suse | compat-openssl098 | rpm | linux enterprise server for sap applications 12 sp5 | 0.9.8j-106.42.1 | Not reported | SUSE-SU-2023:0581-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp4 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-espos | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp1-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp2-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp1 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp2 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7.1 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
| Opensuse | openssl-1_0_0 | rpm | leap 15.4 | 1.0.2p-150000.3.65.1 | Not reported | SUSE-SU-2023:0305-2 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libssl3]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [libssl-dev]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [libssl-doc]Unknown
Source package: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
- [openssl]Unknown
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesFixed · Fixed:
3.0.8-1usn · openssl · debian · bookworm
Observed:
References
- [https://access.redhat.com/errata/RHSA-2023:3408]
- [https://ftp.suse.com/pub/projects/security/]
- [https://nvd.nist.gov/vuln/detail/CVE-2022-4304]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0305-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0305-2]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0306-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0307-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0308-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0309-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0310-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0311-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0581-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0584-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:0684-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2622-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2623-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2624-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2633-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2634-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:2648-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:29171-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:3096-1]
- [https://osv.dev/vulnerability/SUSE-SU-2023:3179-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2022-4304]
- [https://osv.dev/vulnerability/USN-6564-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:12688-1]
- [https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-229-01.json]
- [https://security-tracker.debian.org/tracker/CVE-2022-4304]
- [https://ubuntu.com/security/notices/USN-7894-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0304.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]