CVE catalog

CVE-2023-0464

EDK II vulnerabilities

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published: Mar 22, 2023, 4:36:47 PM UTC
Source: [NVD] · [CVE record]
EPSS: 3.98% · Oct 22, 2026

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	openssl	sid	`3.6.5-1`	fixed
Debian	openssl	forky	`3.6.5-1`	fixed
Debian	openssl	trixie	`3.5.7-1~deb13u2`	fixed
Debian	openssl	trixie-security	`3.5.7-1~deb13u3`	fixed
Debian	openssl	bookworm	`3.0.20-1~deb12u2`	fixed
Debian	openssl	bookworm-security	`3.0.22-1~deb12u1`	fixed
Ubuntu	openssl	noble	`3.0.9-1`	fixed
Ubuntu	edk2	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-aa64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-arm	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-ia32	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-riscv64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	efi-shell-x64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	ovmf	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	ovmf-ia32	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-aarch64	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-arm	noble	`2024.02-2ubuntu0.6`	fixed
Ubuntu	qemu-efi-riscv64	noble	`2024.02-2ubuntu0.6`	fixed
Cpe	openssl	Not reported	`3.1.1`	fixed
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.fips.2.8`	vulnerable
Ubuntu	openssl	pro	`1.1.1f-1ubuntu2.fips.7.1`	vulnerable
Ubuntu	edk2	pro	`0~20190606.20d2e5a1-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-3`	vulnerable
Ubuntu	edk2	pro	`0~20190828.37eef910-4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-1ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.1`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.2`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.3`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.4`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.5`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6`	vulnerable
Ubuntu	edk2	pro	`0~20191122.bd85bf54-2ubuntu3.6+esm1`	vulnerable
Ubuntu	openssl	18.04	`1.0.2g-1ubuntu13`	vulnerable
Ubuntu	openssl	18.04	`1.0.2g-1ubuntu14`	vulnerable
Ubuntu	openssl	18.04	`1.0.2n-1ubuntu1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu2`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu3`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4.1`	vulnerable
Ubuntu	openssl	18.04	`1.1.0g-2ubuntu4.3`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.1`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.2`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.3`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.4`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.5`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.6`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.7`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.8`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.9`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.10`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.13`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.14`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.15`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.17`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.19`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.20`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.21`	vulnerable
Ubuntu	openssl	18.04	`1.1.1-1ubuntu2.1~18.04.22`	fixed
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu2`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu3`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu4`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.1`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.2`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.3`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.4`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.5`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.6`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.7`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.8`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.9`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.10`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.11`	vulnerable
Ubuntu	openssl1.0	18.04	`1.0.2n-1ubuntu5.12`	fixed
Ubuntu	openssl	20.04	`1.1.1c-1ubuntu4`	vulnerable
Ubuntu	openssl	20.04	`1.1.1d-2ubuntu3`	vulnerable
Ubuntu	openssl	20.04	`1.1.1d-2ubuntu6`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu1`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.1`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.2`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.3`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.4`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.5`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.8`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.9`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.10`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.11`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.12`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.13`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.15`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.16`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.17`	vulnerable
Ubuntu	openssl	20.04	`1.1.1f-1ubuntu2.18`	fixed
Ubuntu	edk2	22.04	`2021.08~rc0-2`	vulnerable
Ubuntu	edk2	22.04	`2021.08-3`	vulnerable
Ubuntu	edk2	22.04	`2021.11~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-1`	vulnerable
Ubuntu	edk2	22.04	`2021.11-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02~rc1-1ubuntu1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.1`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.2`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.3`	vulnerable
Ubuntu	edk2	22.04	`2022.02-3ubuntu0.22.04.4`	fixed
Ubuntu	openssl	22.04	`1.1.1l-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.0-1ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.1-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.1`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.2`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.4`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.5`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.6`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.7`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.8`	vulnerable
Ubuntu	openssl	22.04	`3.0.2-0ubuntu1.9`	fixed
Ubuntu	nodejs	pro	`12.22.5~dfsg-5ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu1`	vulnerable
Ubuntu	nodejs	pro	`12.22.7~dfsg-2ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.1`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.2`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.3`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.4`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.5`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6`	vulnerable
Ubuntu	nodejs	pro	`12.22.9~dfsg-1ubuntu3.6+esm2`	vulnerable
Alpine	openssl	3.14	`1.1.1t-r1`	fixed
Alpine	openssl	3.15	`1.1.1t-r2`	fixed
Alpine	openssl	3.16	`1.1.1t-r1`	fixed
Alpine	openssl	3.17	`3.0.8-r1`	fixed
Alpine	openssl	3.18	`3.1.0-r1`	fixed
Alpine	openssl	3.19	`3.1.0-r1`	fixed
Alpine	openssl	3.20	`3.1.0-r1`	fixed
Alpine	openssl	3.21	`3.1.0-r1`	fixed
Alpine	openssl	3.22	`3.1.0-r1`	fixed
Alpine	openssl	3.23	`3.1.0-r1`	fixed
Alpine	openssl	3.24	`3.1.0-r1`	fixed
Alpine	openssl3	3.15	`3.0.8-r1`	fixed
Alpine	openssl3	3.16	`3.0.8-r1`	fixed
Opensuse	python-pymssql	tumbleweed	`2.3.12-1.1`	fixed
Suse	openssl-1_1	linux enterprise high performance computing 15 sp2-ltss	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise high performance computing 15 sp3-espos	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise high performance computing 15 sp3-ltss	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise real time 15 sp3	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise server 15 sp2-ltss	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise server 15 sp3-ltss	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise server for sap applications 15 sp2	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise server for sap applications 15 sp3	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	manager proxy 4.2	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	manager server 4.2	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise micro 5.1	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	linux enterprise micro 5.2	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	enterprise storage 7	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl-1_1	enterprise storage 7.1	`1.1.1d-150200.11.62.1`	fixed
Suse	openssl	linux enterprise server 11 sp4 ltss extreme core	`0.9.8j-0.106.63.1`	fixed
Suse	openssl-1_1	openstack cloud 9	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	openstack cloud crowbar 9	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise server for sap applications 12 sp4	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise software development kit 12 sp5	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise server 12 sp4-espos	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise server 12 sp4-ltss	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise server 12 sp5	`1.1.1d-2.78.1`	fixed
Suse	openssl-1_1	linux enterprise server for sap applications 12 sp5	`1.1.1d-2.78.1`	fixed
Suse	openssl	linux enterprise server 12 sp2-bcl	`1.0.2j-60.89.1`	fixed
Suse	openssl-1_1	linux enterprise high performance computing 15 sp1-ltss	`1.1.0i-150100.14.45.1`	fixed
Suse	openssl-1_1	linux enterprise server 15 sp1-ltss	`1.1.0i-150100.14.45.1`	fixed
Suse	openssl-1_1	linux enterprise server for sap applications 15 sp1	`1.1.0i-150100.14.45.1`	fixed
Suse	openssl-1_1	linux enterprise micro 5.3	`1.1.1l-150400.7.31.2`	fixed
Suse	openssl-1_1	linux enterprise micro 5.4	`1.1.1l-150400.7.31.2`	fixed
Suse	openssl-1_1	linux enterprise module for basesystem 15 sp4	`1.1.1l-150400.7.31.2`	fixed
Opensuse	openssl-1_1	leap micro 5.3	`1.1.1l-150400.7.31.2`	fixed
Opensuse	openssl-1_1	leap 15.4	`1.1.1l-150400.7.31.2`	fixed
Suse	compat-openssl098	linux enterprise module for legacy 12	`0.9.8j-106.45.1`	fixed
Suse	compat-openssl098	linux enterprise server for sap applications 12 sp4	`0.9.8j-106.45.1`	fixed
Suse	compat-openssl098	linux enterprise server for sap applications 12 sp5	`0.9.8j-106.45.1`	fixed
Opensuse	openssl-3	tumbleweed	`3.1.1-1.1`	fixed
Suse	openssl1	linux enterprise server 11 sp4 ltss extreme core	`1.0.1g-0.58.59.1`	fixed
Suse	openssl-1_0_0	openstack cloud 9	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	openstack cloud crowbar 9	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise server for sap applications 12 sp4	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise software development kit 12 sp5	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 12 sp4-espos	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 12 sp4-ltss	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 12 sp5	`1.0.2p-3.69.1`	fixed
Suse	openssl-1_0_0	linux enterprise server for sap applications 12 sp5	`1.0.2p-3.69.1`	fixed
Suse	openssl-3	linux enterprise module for basesystem 15 sp4	`3.0.1-150400.4.20.1`	fixed
Opensuse	openssl-3	leap 15.4	`3.0.1-150400.4.20.1`	fixed
Opensuse	openssl-1_0_0	tumbleweed	`1.0.2u-14.1`	fixed
Opensuse	openssl-1_1	tumbleweed	`1.1.1t-2.1`	fixed
Suse	openssl-1_0_0	linux enterprise module for legacy 15 sp4	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise high performance computing 15 sp3-espos	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise high performance computing 15 sp3-ltss	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 15 sp1-ltss	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 15 sp2-ltss	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server 15 sp3-ltss	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server for sap applications 15 sp1	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server for sap applications 15 sp2	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	linux enterprise server for sap applications 15 sp3	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	enterprise storage 7	`1.0.2p-150000.3.70.1`	fixed
Suse	openssl-1_0_0	enterprise storage 7.1	`1.0.2p-150000.3.70.1`	fixed
Opensuse	openssl-1_0_0	leap 15.4	`1.0.2p-150000.3.70.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	openssl	source	sid	`3.0.9-1`	not yet assigned	Not reported	[1034720]
Debian	openssl	source	forky	`3.0.9-1`	not yet assigned	Not reported	[1034720]
Debian	openssl	source	trixie	`3.0.9-1`	not yet assigned	Not reported	[1034720]
Debian	openssl	source	bookworm	`3.0.9-1`	not yet assigned	Not reported	[1034720]
Ubuntu	openssl	deb	noble	`3.0.9-1`	Not reported	Not reported	Not reported
Ubuntu	edk2	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-aa64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-arm	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-ia32	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-riscv64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	efi-shell-x64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	ovmf	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	ovmf-ia32	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-aarch64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-arm	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Ubuntu	qemu-efi-riscv64	deb	noble	`2024.02-2ubuntu0.6`	Not reported	Not reported	Not reported
Cpe	openssl	cpe	Not reported	`3.1.1`	Not reported	NVD-CVE-2023-0464	Not reported
Ubuntu	openssl	deb	18.04	`1.1.1-1ubuntu2.1~18.04.22`	Not reported	UBUNTU-CVE-2023-0464	Not reported
Ubuntu	openssl1.0	deb	18.04	`1.0.2n-1ubuntu5.12`	Not reported	UBUNTU-CVE-2023-0464	Not reported
Ubuntu	openssl	deb	20.04	`1.1.1f-1ubuntu2.18`	Not reported	UBUNTU-CVE-2023-0464	Not reported
Ubuntu	edk2	deb	22.04	`2022.02-3ubuntu0.22.04.4`	Not reported	UBUNTU-CVE-2023-0464	Not reported
Ubuntu	openssl	deb	22.04	`3.0.2-0ubuntu1.9`	Not reported	UBUNTU-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.14	`1.1.1t-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.15	`1.1.1t-r2`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.16	`1.1.1t-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.17	`3.0.8-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.18	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.19	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.20	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.21	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.22	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.23	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl	apk	3.24	`3.1.0-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl3	apk	3.15	`3.0.8-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Alpine	openssl3	apk	3.16	`3.0.8-r1`	Not reported	ALPINE-CVE-2023-0464	Not reported
Opensuse	python-pymssql	rpm	tumbleweed	`2.3.12-1.1`	Not reported	OPENSUSE-SU-2026:10199-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise high performance computing 15 sp2-ltss	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise high performance computing 15 sp3-espos	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise real time 15 sp3	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 15 sp2-ltss	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 15 sp3-ltss	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server for sap applications 15 sp2	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server for sap applications 15 sp3	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	manager proxy 4.2	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	manager server 4.2	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise micro 5.1	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise micro 5.2	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	enterprise storage 7	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl-1_1	rpm	enterprise storage 7.1	`1.1.1d-150200.11.62.1`	Not reported	SUSE-SU-2023:1790-1	Not reported
Suse	openssl	rpm	linux enterprise server 11 sp4 ltss extreme core	`0.9.8j-0.106.63.1`	Not reported	SUSE-SU-2023:1764-1	Not reported
Suse	openssl-1_1	rpm	openstack cloud 9	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	openstack cloud crowbar 9	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server for sap applications 12 sp4	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise software development kit 12 sp5	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 12 sp4-espos	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 12 sp4-ltss	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 12 sp5	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server for sap applications 12 sp5	`1.1.1d-2.78.1`	Not reported	SUSE-SU-2023:1747-1	Not reported
Suse	openssl	rpm	linux enterprise server 12 sp2-bcl	`1.0.2j-60.89.1`	Not reported	SUSE-SU-2023:1738-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise high performance computing 15 sp1-ltss	`1.1.0i-150100.14.45.1`	Not reported	SUSE-SU-2023:1748-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server 15 sp1-ltss	`1.1.0i-150100.14.45.1`	Not reported	SUSE-SU-2023:1748-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise server for sap applications 15 sp1	`1.1.0i-150100.14.45.1`	Not reported	SUSE-SU-2023:1748-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise micro 5.3	`1.1.1l-150400.7.31.2`	Not reported	SUSE-SU-2023:1745-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise micro 5.4	`1.1.1l-150400.7.31.2`	Not reported	SUSE-SU-2023:1745-1	Not reported
Suse	openssl-1_1	rpm	linux enterprise module for basesystem 15 sp4	`1.1.1l-150400.7.31.2`	Not reported	SUSE-SU-2023:1745-1	Not reported
Opensuse	openssl-1_1	rpm	leap micro 5.3	`1.1.1l-150400.7.31.2`	Not reported	SUSE-SU-2023:1745-1	Not reported
Opensuse	openssl-1_1	rpm	leap 15.4	`1.1.1l-150400.7.31.2`	Not reported	SUSE-SU-2023:1745-1	Not reported
Suse	compat-openssl098	rpm	linux enterprise module for legacy 12	`0.9.8j-106.45.1`	Not reported	SUSE-SU-2023:1737-1	Not reported
Suse	compat-openssl098	rpm	linux enterprise server for sap applications 12 sp4	`0.9.8j-106.45.1`	Not reported	SUSE-SU-2023:1737-1	Not reported
Suse	compat-openssl098	rpm	linux enterprise server for sap applications 12 sp5	`0.9.8j-106.45.1`	Not reported	SUSE-SU-2023:1737-1	Not reported
Opensuse	openssl-3	rpm	tumbleweed	`3.1.1-1.1`	Not reported	OPENSUSE-SU-2024:12969-1	Not reported
Suse	openssl1	rpm	linux enterprise server 11 sp4 ltss extreme core	`1.0.1g-0.58.59.1`	Not reported	SUSE-SU-2023:1754-1	Not reported
Suse	openssl-1_0_0	rpm	openstack cloud 9	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	openstack cloud crowbar 9	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server for sap applications 12 sp4	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise software development kit 12 sp5	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 12 sp4-espos	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 12 sp4-ltss	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 12 sp5	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server for sap applications 12 sp5	`1.0.2p-3.69.1`	Not reported	SUSE-SU-2023:1704-1	Not reported
Suse	openssl-3	rpm	linux enterprise module for basesystem 15 sp4	`3.0.1-150400.4.20.1`	Not reported	SUSE-SU-2023:1746-1	Not reported
Opensuse	openssl-3	rpm	leap 15.4	`3.0.1-150400.4.20.1`	Not reported	SUSE-SU-2023:1746-1	Not reported
Opensuse	openssl-1_0_0	rpm	tumbleweed	`1.0.2u-14.1`	Not reported	OPENSUSE-SU-2024:12824-1	Not reported
Opensuse	openssl-1_1	rpm	tumbleweed	`1.1.1t-2.1`	Not reported	OPENSUSE-SU-2024:12825-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise module for legacy 15 sp4	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise high performance computing 15 sp3-espos	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 15 sp1-ltss	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 15 sp2-ltss	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server 15 sp3-ltss	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server for sap applications 15 sp1	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server for sap applications 15 sp2	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	linux enterprise server for sap applications 15 sp3	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	enterprise storage 7	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Suse	openssl-1_0_0	rpm	enterprise storage 7.1	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported
Opensuse	openssl-1_0_0	rpm	leap 15.4	`1.0.2p-150000.3.70.1`	Not reported	SUSE-SU-2023:1703-1	Not reported

[Debian bug #1034720]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libssl3]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
[libssl-dev]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
[libssl-doc]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
[openssl]Unknown
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Fixed · Fixed: 3.0.9-1
  usn · openssl · debian · bookworm

[openSUSE Tumbleweed]

[libopenssl3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl3-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl-3-devel]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl-3-devel-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider-32bit]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl-3-fips-provider-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[libopenssl3-x86-64-v3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[openssl-3]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · x86_64 · tumbleweed
  Fixed · Fixed: 3.1.1-1.1
  usn · openssl-3 · opensuse · tumbleweed
[openssl-3-doc]Unknown
Source package: [openssl-3]
Details (1)
- 3.5.3-8.1 · noarch · tumbleweed
  Unknown · Fixed: 3.1.1-1.1
  Version impact unknown
  usn · openssl-3 · opensuse · tumbleweed
[python313-pymssql]Unknown
Source package: [python-pymssql]
Details (1)
- 2.3.13-1.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.3.12-1.1
  Version impact unknown
  usn · python-pymssql · opensuse · tumbleweed
[python314-pymssql]Unknown
Source package: [python-pymssql]
Details (1)
- 2.3.13-1.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.3.12-1.1
  Version impact unknown
  usn · python-pymssql · opensuse · tumbleweed

Observed: Oct 23, 2026, 7:24:15 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]