CVE catalog

CVE-2023-0286

EDK II vulnerabilities

Severity: High · CVSS 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Published: Feb 7, 2023, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 71.24% · Oct 22, 2026

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	fixed
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	fixed
Debian	openssl	bookworm-security	`3.0.22-1~deb12u1`	fixed
Ubuntu	openssl	noble	`3.0.8-1`	fixed
Ubuntu	edk2	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-aa64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-arm	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-ia32	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-riscv64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-x64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	ovmf	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	ovmf-ia32	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-aarch64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-arm	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-riscv64	noble	`2024.02-2ubuntu0.6`	fixed
PyPI	cryptography	Not reported	`39.0.1`	fixed
Crates.Io	openssl-src	Not reported	`111.25.0`	fixed
Crates.Io	openssl-src	Not reported	`300.0.12`	fixed
Cpe	openssl	Not reported	`3.0.8`	fixed
Cpe	stormshield_management_center	Not reported	`3.3.3`	fixed
Cpe	stormshield_network_security	Not reported	`4.6.3`	fixed
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.fips.2.8`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.fips.7.1`	vulnerable
Ubuntu	edk2	pro	`0~20190606.20d2e5a1-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-3`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.5`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6+esm1`	vulnerable
Ubuntu	openssl	18.04	`1.0.2g-1ubuntu13`	vulnerable
Ubuntu	openssl	18.04	`1.0.2g-1ubuntu14`	vulnerable
Ubuntu	openssl	18.04	`1.0.2n-1ubuntu1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu2`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu3`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4.1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4.3`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.1`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.2`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.3`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.4`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.5`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.6`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.7`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.8`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.9`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.10`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.13`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.14`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.15`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.17`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.19`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.20`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.21`	fixed
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu2`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu3`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu4`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.1`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.2`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.3`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.4`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.5`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.6`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.7`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.8`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.9`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.10`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.11`	fixed
Ubuntu	openssl	20.04	`1.1.1c-1ubuntu4`	vulnerable
Ubuntu	openssl	20.04	`1.1.1d-2ubuntu3`	vulnerable
Ubuntu	openssl	20.04	`1.1.1d-2ubuntu6`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu1`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.1`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.2`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.3`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.4`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.5`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.8`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.9`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.10`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.11`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.12`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.13`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.15`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.16`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.17`	fixed
Ubuntu	edk2	22.04	`2021.08~rc0-2`	vulnerable
Ubuntu	edk2	22.04	`2021.08-3`	vulnerable
Ubuntu	edk2	22.04	`2021.11~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1ubuntu1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.4`	fixed
Ubuntu	nodejs	22.04	`12.22.5~dfsg-5ubuntu1`	vulnerable
Ubuntu	nodejs	22.04	`12.22.7~dfsg-2ubuntu1`	vulnerable
Ubuntu	nodejs	22.04	`12.22.7~dfsg-2ubuntu3`	vulnerable
Ubuntu	nodejs	22.04	`12.22.9~dfsg-1ubuntu2`	vulnerable
Ubuntu	nodejs	22.04	`12.22.9~dfsg-1ubuntu3`	vulnerable
Ubuntu	nodejs	22.04	`12.22.9~dfsg-1ubuntu3.1`	vulnerable
Ubuntu	nodejs	22.04	`12.22.9~dfsg-1ubuntu3.2`	vulnerable
Ubuntu	nodejs	22.04	`12.22.9~dfsg-1ubuntu3.3`	fixed
Ubuntu	openssl	22.04	`1.1.1l-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.0-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.1-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.2`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.4`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.5`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.6`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.7`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.8`	fixed
Alpine	openssl	3.14	`1.1.1t-r0`	fixed
Alpine	openssl	3.15	`1.1.1t-r0`	fixed
Alpine	openssl	3.16	`1.1.1t-r0`	fixed
Alpine	openssl	3.17	`3.0.8-r0`	fixed
Alpine	openssl	3.18	`3.0.8-r0`	fixed
Alpine	openssl	3.19	`3.0.8-r0`	fixed
Alpine	openssl	3.20	`3.0.8-r0`	fixed
Alpine	openssl	3.21	`3.0.8-r0`	fixed
Alpine	openssl	3.22	`3.0.8-r0`	fixed
Alpine	openssl	3.23	`3.0.8-r0`	fixed
Alpine	openssl	3.24	`3.0.8-r0`	fixed
Alpine	openssl3	3.15	`3.0.8-r0`	fixed
Alpine	openssl3	3.16	`3.0.8-r0`	fixed
Opensuse	rubygem-grpc	tumbleweed	`1.70.1-1.7`	fixed
Suse	openssl-1_1-livepatches	linux enterprise live patching 15 sp4	`0.1-150400.3.3.1`	fixed
Opensuse	openssl-1_1-livepatches	leap 15.4	`0.1-150400.3.3.1`	fixed
Opensuse	python310	tumbleweed	`3.10.12-1.1`	fixed
Opensuse	oci-cli	tumbleweed	`3.23.3-1.1`	fixed
Opensuse	python39	tumbleweed	`3.9.17-1.1`	fixed
Opensuse	python312	tumbleweed	`3.12.0b3-1.1`	fixed
Opensuse	rubygem-grpc	tumbleweed	`1.70.1-1.1`	fixed
Opensuse	rubygem-grpc	tumbleweed	`1.63.0-1.1`	fixed
Opensuse	python38	tumbleweed	`3.8.17-1.2`	fixed
Opensuse	rubygem-grpc	tumbleweed	`1.52.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.0.8-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	forky	`3.0.8-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	trixie	`3.0.8-1`	not yet assigned	Not reported	Not reported
Debian	openssl	source	bookworm	`3.0.8-1`	not yet assigned	Not reported	Not reported
Ubuntu	openssl	deb	noble	`3.0.8-1`	Not reported	Not reported	Not reported
Ubuntu	edk2	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-aa64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-arm	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-ia32	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-riscv64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-x64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	ovmf	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	ovmf-ia32	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-aarch64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-arm	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-riscv64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
PyPI	cryptography	PyPI	Not reported	`39.0.1`	Not reported	Not reported	Not reported
Crates.Io	openssl-src	crates.io	Not reported	`111.25.0`	Not reported	Not reported	Not reported
Crates.Io	openssl-src	crates.io	Not reported	`300.0.12`	Not reported	Not reported	Not reported
Cpe	openssl	cpe	Not reported	`3.0.8`	Not reported	NVD-CVE-2023-0286	Not reported
Cpe	stormshield_management_center	cpe	Not reported	`3.3.3`	Not reported	NVD-CVE-2023-0286	Not reported
Cpe	stormshield_network_security	cpe	Not reported	`4.6.3`	Not reported	NVD-CVE-2023-0286	Not reported
Ubuntu	openssl	deb	18.04	`1.1.1-1ubuntu2.1~18.04.21`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Ubuntu	openssl1.0	deb	18.04	`1.0.2n-1ubuntu5.11`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Ubuntu	openssl	deb	20.04	`1.1.1f-1ubuntu2.17`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Ubuntu	edk2	deb	22.04	`2022.02-3ubuntu0.22.04.4`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Ubuntu	nodejs	deb	22.04	`12.22.9~dfsg-1ubuntu3.3`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Ubuntu	openssl	deb	22.04	`3.0.2-0ubuntu1.8`	Not reported	UBUNTU-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.14	`1.1.1t-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.15	`1.1.1t-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.16	`1.1.1t-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.17	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.18	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.19	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.20	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.21	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.22	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.23	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl	apk	3.24	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl3	apk	3.15	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Alpine	openssl3	apk	3.16	`3.0.8-r0`	Not reported	ALPINE-CVE-2023-0286	Not reported
Opensuse	rubygem-grpc	rpm	tumbleweed	`1.70.1-1.7`	Not reported	OPENSUSE-SU-2026:10348-1	Not reported
Suse	openssl-1_1-livepatches	rpm	linux enterprise live patching 15 sp4	`0.1-150400.3.3.1`	Not reported	SUSE-SU-2023:0482-1	Not reported
Opensuse	openssl-1_1-livepatches	rpm	leap 15.4	`0.1-150400.3.3.1`	Not reported	SUSE-SU-2023:0482-1	Not reported
Opensuse	python310	rpm	tumbleweed	`3.10.12-1.1`	Not reported	OPENSUSE-SU-2024:13031-1	Not reported
Opensuse	oci-cli	rpm	tumbleweed	`3.23.3-1.1`	Not reported	OPENSUSE-SU-2024:12787-1	Not reported
Opensuse	python39	rpm	tumbleweed	`3.9.17-1.1`	Not reported	OPENSUSE-SU-2024:13033-1	Not reported
Opensuse	python312	rpm	tumbleweed	`3.12.0b3-1.1`	Not reported	OPENSUSE-SU-2024:13032-1	Not reported
Opensuse	rubygem-grpc	rpm	tumbleweed	`1.70.1-1.1`	Not reported	OPENSUSE-SU-2025:14821-1	Not reported
Opensuse	rubygem-grpc	rpm	tumbleweed	`1.63.0-1.1`	Not reported	OPENSUSE-SU-2024:13956-1	Not reported
Opensuse	python38	rpm	tumbleweed	`3.8.17-1.2`	Not reported	OPENSUSE-SU-2024:13029-1	Not reported
Opensuse	rubygem-grpc	rpm	tumbleweed	`1.52.0-1.1`	Not reported	OPENSUSE-SU-2024:12794-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libssl3]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
[libssl-dev]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
[libssl-doc]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
[openssl]Unknown
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.8-1
  usn · openssl · debian · bookworm

[openSUSE Tumbleweed]

[oci-cli]Unknown
Source package: [oci-cli]
Details (1)
- 3.83.0-1.2 · noarch · tumbleweed
  Fixed · Fixed: 3.23.3-1.1
  usn · oci-cli · opensuse · tumbleweed
[python310]Unknown
Source package: [python310]
Details (1)
- 3.10.20-9.1 · x86_64 · tumbleweed
  Fixed · Fixed: 3.10.12-1.1
  usn · python310 · opensuse · tumbleweed
[python310-curses]Unknown
Source package: [python310]
Details (1)
- 3.10.20-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.10.12-1.1
  Version impact unknown
  usn · python310 · opensuse · tumbleweed
[python310-dbm]Unknown
Source package: [python310]
Details (1)
- 3.10.20-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.10.12-1.1
  Version impact unknown
  usn · python310 · opensuse · tumbleweed
[python310-idle]Unknown
Source package: [python310]
Details (1)
- 3.10.20-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.10.12-1.1
  Version impact unknown
  usn · python310 · opensuse · tumbleweed
[python310-tk]Unknown
Source package: [python310]
Details (1)
- 3.10.20-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.10.12-1.1
  Version impact unknown
  usn · python310 · opensuse · tumbleweed
[python312]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Fixed · Fixed: 3.12.0b3-1.1
  usn · python312 · opensuse · tumbleweed
[python312-32bit]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[python312-curses]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[python312-dbm]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[python312-idle]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[python312-tk]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[python312-x86-64-v3]Unknown
Source package: [python312]
Details (1)
- 3.12.13-9.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.12.0b3-1.1
  Version impact unknown
  usn · python312 · opensuse · tumbleweed
[ruby4.0-rubygem-grpc]Unknown
Source package: [rubygem-grpc]
Details (1)
- 1.70.1-1.11 · x86_64 · tumbleweed
  Unknown · Fixed: 1.52.0-1.1, 1.63.0-1.1, 1.70.1-1.1, 1.70.1-1.7
  Version impact unknown
  usn · rubygem-grpc · opensuse · tumbleweed

Observed: Oct 23, 2026, 7:24:09 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]