Type Confusion in OpenSSL - CVE-2023-0286

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU71992

Type Confusion in OpenSSL - CVE-2023-0286

Published: February 7, 2023 / Updated: December 11, 2023


Vulnerability identifier: #VU71992
CSH Severity: High
CVSS v4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-0286
CWE-ID: CWE-843
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a type confusion error related to X.400 address processing inside an X.509 GeneralName. A remote attacker can pass specially crafted data to the application, trigger a type confusion error and perform a denial of service (DoS) attack or read memory contents.

In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.


Affected software

OpenSSL
AFS660-C
SCALANCE W1750D (ROW)
SCALANCE W1750D (USA)
SCALANCE W1750D (JP)
AFS650
AFS665-B
AFS670-V2
AFS670
AFS675
AFS677
AFR677
PCULogger tool
QuTS hero
LANTIME Operating System Firmware (LTOS)
PowerEdge R660
PowerEdge C6620
PowerEdge R760
PowerEdge MX760c
PowerEdge R7625
PowerEdge R7615
PowerEdge R6625
PowerEdge R6615
PowerEdge T150
PowerEdge R250
PowerEdge T350
PowerEdge R350
PowerEdge MX750c
PowerEdge C6520
PowerEdge R650
PowerEdge R750XA
PowerEdge XR12
PowerEdge XR11
PowerEdge R750XS
PowerEdge R750
PowerEdge R650XS
PowerEdge R450
PowerEdge T550
PowerEdge R550
PowerEdge XR4510c
PowerEdge XR4520c
PowerEdge T40
Dell EMC XC Core XC7525
Dell EMC NX440
PowerEdge R340
PowerEdge R240
PowerEdge T340
PowerEdge T140
Precision 7910 Rack
DSS 8440
Dell EMC XC Core XCXR2
PowerEdge M640 (for PE VRTX)
PowerEdge MX740C
PowerEdge MX840C
Dell EMC XC Core XC6520
Dell EMC XC Core XC750xa
Dell EMC XC Core XC750
Dell EMC XC Core XC650
Dell EMC XC Core XC450
PowerEdge R740XD
Dell EMC XC Core XC940 System
Dell EMC XC Core XC740xd2
Dell EMC XC Core XC740xd System
Dell EMC XC Core XC640 System
Dell EMC XC Core 6420 System
Dell EMC Storage NX3340
Dell EMC Storage NX3240
PowerEdge C4140
PowerEdge R740
PowerEdge R640
PowerEdge M640
PowerEdge FC640
PowerEdge R940
PowerEdge R540
PowerEdge R440
PowerEdge T440
PowerEdge XR2
PowerEdge C6420
PowerEdge T640
PowerEdge R940XA
PowerEdge R840
PowerEdge R740XD2
Precision 7920 Rack
SIMATIC MV560 X
SIMATIC MV560 U
SIMATIC MV550 S
SIMATIC MV540 H
SIMATIC MV540 S
SIMATIC MV550 H
Virtualization Engine TS7700 3957-VED
Virtualization Engine TS7700 3957-VEC
PowerScale OneFS
Junos cRPD
Amazon Linux AMI
Debian Linux
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)
Red Hat Enterprise Linux Server - Extended Life Cycle Support
CentOS
Fedora
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
SUSE Enterprise Storage
IBM AIX
IBM i
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
Oracle Solaris
FreeBSD
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Ubuntu
Slackware Linux
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
Legacy Module
openSUSE Leap
openEuler
Junos OS Evolved
Open Enclave SDK
IBM App Connect Enterprise
IBM CICS TX Advanced
IBM Observability with Instana
VMware Tanzu Application Service for VMs
Isolation Segment
IBM Business Automation Workflow
Data Lakehouse
IBM Cloud Pak for Data System
z/Transaction Processing Facility ( z/TPF)
Service Telemetry Framework
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Oracle VM Server for x86
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat Migration Toolkit for Applications
IBM Rational Build Forge
IBM MQ for HPE NonStop
Oracle Communications Diameter Signaling Router
IBM QRadar WinCollect Agent
IBM Integration Bus
NetWorker
Netcool Operations Insight
Spectrum Discover
IBM MQ Operator
IBM Spectrum Conductor
PowerEdge XE8545
PowerEdge R7525
PowerEdge C6525
PowerEdge R6525
PowerEdge R6515
PowerEdge R7515
IBM MaaS360 Mobile Enterprise Gateway
IBM MaaS360 Cloud Extender Agent
IBM Cloud Transformation Advisor
IBM Tivoli Netcool System Service Monitors/Application Service Monitors
IBM Decision Optimization for Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
Data Replication on Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Spectrum Control
Dell Secure Connect Gateway
Session Smart Router
IBM Safer Payments
IBM Spectrum Symphony
IBM Rational ClearQuest
IBM Rational ClearCase
IBM Power Hardware Management Console (HMC)
IBM Workload Scheduler
IBM Spectrum Protect Plus
InfoSphere Master Data Management
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
Juniper Cloud Native Router
Edgecross Basic Software for Windows ECP-BS1-W
Edgecross Basic Software for Developers ECP-BS1-W-D
MobileFirst Platform
Cognos Dashboards on Cloud Pak for Data
librdkafka
Telemetry Dashboard
IBM Watson Machine Learning Accelerator
DB2 Data Management Console
EMC ECS
Liquidware
IBM MQ Appliance
Citrix Workspace App
Webex App VDI
HP-UX OpenSSL
Virtualization Management Interface
cflinuxfs3
Precision 7960 Rack
Aspera faspio Gateway
ObjectScale
Sterling Connect:Express for UNIX
Dell EMC Streaming Data Platform
IBM Aspera Shares
Secured Component Verification (SCV)
Cloud Pak for Network Automation
Avamar Data Store Gen5A
IBM MaaS360 Base Module
MaaS360 PKI Certificate Module
MaaS360 Configuration Utility
PowerStore T
Dell EMC PowerStore Family Operating System
IBM Cloud Pak for Watson AIOps
Platform Automation Toolkit
Events Operator
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
XtremIO X2
IBM Spectrum Protect Client Management Service
IBM Virtualization Engine TS7700 3948-VED
EMC Cloud Tiering Appliance
Dell Data Protection Central
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
GT SoftGOT2000
OPC UA Data Collector
Dell EMC Storage Monitoring and Reporting (SMR)
PCU400
SCALANCE XR528-6M
SCALANCE XR526-8C
SCALANCE XR552-12M
SCALANCE XR524-8C
SCALANCE XM416-4C
SCALANCE XM408-8C
SCALANCE XM408-4C
Dell EMC VxRail Appliance
Gaia
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libssl1.0.0 (Ubuntu package)
openssl-1_1-livepatches
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
openssl (Red Hat package)
libopenssl1-devel
libopenssl1_0_0
libopenssl1_0_0-32bit
openssl1
openssl1-doc
libopenssl1_0_0-debuginfo-32bit
libopenssl1_0_0-hmac-32bit
libopenssl-devel
openssl-debugsource
openssl
libopenssl1_0_0-hmac
openssl-debuginfo
openssl-doc
libopenssl1_0_0-debuginfo
openssl-devel
openssl-static
openssl-perl
openssl-libs
compat-openssl10 (Red Hat package)
compat-openssl10
openssl-1_0_0
libopenssl-1_0_0-devel
libopenssl-1_0_0-devel-32bit
openssl-1_0_0-doc
openssl-1_0_0-debugsource
openssl-1_0_0-debuginfo
libopenssl10
libopenssl10-debuginfo
libopenssl1_0_0-steam-32bit-debuginfo
openssl-1_0_0-cavs-debuginfo
libopenssl1_0_0-steam
openssl-1_0_0-cavs
libopenssl1_0_0-steam-debuginfo
libopenssl1_0_0-32bit-debuginfo
libopenssl1_0_0-steam-32bit
libopenssl-1_1-devel
libopenssl1_1
libopenssl1_1-debuginfo
libopenssl1_1-hmac
openssl-1_1
openssl-1_1-debuginfo
openssl-1_1-debugsource
libopenssl-1_1-devel-32bit
libopenssl1_1-32bit
libopenssl1_1-32bit-debuginfo
libopenssl1_1-hmac-32bit
libopenssl1_1-debuginfo-32bit
openssl-1_1-doc
openssl-help
openssl11
compat-openssl11 (Red Hat package)
jws5-tomcat-native (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libopenssl-3-devel
libopenssl3
libopenssl3-debuginfo
openssl-3-debuginfo
openssl-3-debugsource
libopenssl-3-devel-32bit
openssl-3-doc
libopenssl3-32bit-debuginfo
libopenssl3-32bit
openssl-3
openssl3
redhat-release-virtualization-host (Red Hat package)
npm
v8-devel
jbcs-httpd24-curl (Red Hat package)
nodejs-debuginfo
nodejs-devel
nodejs-libs
nodejs-full-i18n
nodejs-docs
nodejs-debugsource
nodejs
shim-debugsource
shim-debuginfo
shim
edk2-devel
edk2-aarch64
edk2-help
python3-edk2-devel
edk2-ovmf
edk2
edk2-debugsource
edk2-debuginfo
edk2 (Red Hat package)
dev-libs/openssl
openssl-solibs
libssl1.1 (Ubuntu package)
openssl (Debian package)
libssl3 (Ubuntu package)
libnode-dev (Ubuntu package)
libnode72 (Ubuntu package)
nodejs (Ubuntu package)
edk2 (Ubuntu package)
API Gateway
JBoss Core Services
IBM VIOS
API Manager
IBM Integrated Analytics System
IBM QRadar Network Packet Capture
Node Health Check Operator
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Virtualization
Node Maintenance Operator
VMware Tanzu Operations Manager
python-cryptography
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
grpc
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
IBM Edge Application Manager
VMware Horizon Client
Dell EMC Container Storage Modules
IBM DataPower Gateway
IBM Watson Explorer Foundational Components
IBM Watson Explorer Deep Analytics Edition Foundational Components
Python
QNAP QTS
Splunk Universal Forwarder
JBoss Web Server
Node.js
IBM Qradar SIEM
Cloud Pak for Security (CP4S)
TeleControl Server Basic
Event Streams
NetWorker Management Console
Barracuda CloudGen WAN
Splunk Security Orchestration, Automation and Response (SOAR)
Zimbra Collaboration
PeopleSoft Enterprise PeopleTools
IBM API Connect
IBM Security Guardium
Cisco Jabber
Cisco Webex Meetings
Orion Platform
IBM Security Verify Access
IBM DS8000 Hardware Management Console
IBM Cloud Pak System
IBM MaaS360 VPN Module
EMC ViPR SRM
RSA Authentication Manager
IBM InfoSphere Information Server

How to mitigate CVE-2023-0286

Install updates from vendor's website.

OpenSSL - addressed in versions 1.0.2zg, 1.1.1t, 3.0.8
AFS660-C - update to 7.1.08
Open Enclave SDK - update to 0.18.5
GT SoftGOT2000 - update to 1.295H
OPC UA Data Collector - update to 1.05F
AFS650 - update to 9.1.10
AFS665-B - update to 7.1.08
AFS670-V2 - update to 7.1.08
AFS670 - update to 9.1.10
AFS675 - update to 9.1.10
AFS677 - update to 9.1.10
AFR677 - update to 9.1.10
VMware Tanzu Application Service for VMs - addressed in versions 2.11.35, 2.12.24, 2.13.17, 3.0.7, 4.0.0
PCU400 - addressed in versions 6.6.0, 9.4.2
PCULogger tool - update to 1.2.0
Isolation Segment - addressed in versions 2.11.29, 2.12.19, 2.13.14, 3.0.7, 4.0.0
QuTS hero - update to h5.0.1.2348 build 20230324
API Gateway - update to February 2023
API Manager - update to February 2023
librdkafka - update to 2.1.0
Node Health Check Operator - update to 0.4.1
Self Node Remediation Operator - update to 0.5.1
python-cryptography - update to 39.0.1
Red Hat OpenShift Serverless - update to 1.29.0
Data Lakehouse - update to 1.1.0.0
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.1
IBM Cloud Pak for Data System - update to 1.0.8.0
grpc - addressed in versions 1.44.1, 1.45.3, 1.46.7, 1.47.4, 1.48.4, 1.49.3, 1.50.2, 1.51.2, 1.52.1
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
Service Telemetry Framework - update to 1.5.2
Migration Toolkit for Containers - addressed in versions 1.7.9, 1.7.10
Multicluster Engine for Kubernetes - addressed in versions 2.0.7, 2.0.8, 2.1.6, 2.2.3
OpenShift Service Mesh - update to 2.2.7
IBM Cloud Pak for Multicloud Management - update to 2.3.8
Migration Toolkit for Virtualization - update to 2.4.3
JBoss Core Services - update to 2.4.51 SP2
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.8, 2.6.5, 2.7.3
DB2 Data Management Console - update to 3.1.13
Python - addressed in versions 3.7.17, 3.8.17, 3.9.17
EMC ECS - update to 3.7.0.6
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.9.59, 4.10.56, 4.11.34, 4.11.46, 4.12.16, 4.13.0, 4.13.2
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.7, 4.12.2
OpenShift Virtualization - addressed in versions 4.11.6, 4.12.5
Node Maintenance Operator - update to 5.0.1
QNAP QTS - update to 5.0.1.2346 20230322
OpenShift Logging - addressed in versions 5.5.9, 5.9.5
JBoss Web Server - update to 5.7.3
Red Hat Migration Toolkit for Applications - update to 6.1.0
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
LANTIME Operating System Firmware (LTOS) - update to 7.06.012
IBM Rational Build Forge - update to 8.0.0.24
IBM Qradar SIEM - addressed in versions 7.5.0 Update Pack 8, 7.5.0 Update Pack 6
Barracuda CloudGen WAN - update to 8.3.1 1093
IBM MQ for HPE NonStop - update to 8.1.0.12
Splunk Universal Forwarder - addressed in versions 8.1.14, 8.2.11, 9.0.5
Zimbra Collaboration - addressed in versions 8.8.15 Patch 37, 9.0.0 Patch 30
IBM MQ Appliance - addressed in versions 9.2.0.11, 9.2.5.7, 9.3.0.5, 9.3.2.1
IBM QRadar WinCollect Agent - update to 10.1.3
Node.js - addressed in versions 14.21.3, 16.19.1, 18.14.1, 19.6.1
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
NetWorker - addressed in versions 19.10.0.0, 19.11.0.3, 19.11.0.6, 19.12.0.0, 19.12.0.2
Junos OS Evolved - addressed in versions 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-S1-EVO, 23.2R2-EVO, 23.4R1-EVO
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
Orion Platform - update to 2024.2
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
libssl1.0.0 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.0.2n-1ubuntu5.11
openssl-1_1-livepatches - update to 0.1-150400.3.3.1
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-33.el7jbcs, 0.4.10-33.el8jbcs
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-18.el7jbcs, 1.0.0-18.el8jbcs
openssl (Red Hat package) - addressed in versions 1.0.1e-61.el6_10, 1.0.2k-21.el7_7.1, 1.0.2k-26.el7_9, 1.1.1c-6.el8_1, 1.1.1c-21.el8_2, 1.1.1g-18.el8_4, 1.1.1k-8.el8_6, 1.1.1k-9.el8_7, 3.0.1-46.el9_0, 3.0.1-47.el9_1
libopenssl1-devel - update to 1.0.1g-0.58.56.1
libopenssl1_0_0 - addressed in versions 1.0.1g-0.58.56.1, 1.0.2j-60.86.1, 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
libopenssl1_0_0-32bit - addressed in versions 1.0.1g-0.58.56.1, 1.0.2j-60.86.1, 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl1 - update to 1.0.1g-0.58.56.1
openssl1-doc - update to 1.0.1g-0.58.56.1
libopenssl1_0_0-debuginfo-32bit - addressed in versions 1.0.2j-60.86.1, 1.0.2p-3.64.1
libopenssl1_0_0-hmac-32bit - addressed in versions 1.0.2j-60.86.1, 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
libopenssl-devel - update to 1.0.2j-60.86.1
openssl-debugsource - update to 1.0.2j-60.86.1
openssl - update to 1.0.2j-60.86.1
libopenssl1_0_0-hmac - addressed in versions 1.0.2j-60.86.1, 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl-debuginfo - update to 1.0.2j-60.86.1
openssl-doc - update to 1.0.2j-60.86.1
libopenssl1_0_0-debuginfo - addressed in versions 1.0.2j-60.86.1, 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl-devel - addressed in versions 1.0.2k-26, 1.1.1k-9.0.1
openssl-static - update to 1.0.2k-26
openssl-perl - addressed in versions 1.0.2k-26, 1.1.1k-9.0.1
openssl-libs - addressed in versions 1.0.2k-26, 1.1.1k-9.0.1
openssl - addressed in versions 1.0.2k-26, 1.1.1k-9.0.1
compat-openssl10 (Red Hat package) - update to 1.0.2o-4.el8_10.1
compat-openssl10 - update to 1.0.2o-4.0.1
openssl-1_0_0 - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
libopenssl-1_0_0-devel - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
libopenssl-1_0_0-devel-32bit - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl-1_0_0-doc - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl-1_0_0-debugsource - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
openssl-1_0_0-debuginfo - addressed in versions 1.0.2p-3.64.1, 1.0.2p-150000.3.65.1
libopenssl10 - update to 1.0.2p-150000.3.65.1
libopenssl10-debuginfo - update to 1.0.2p-150000.3.65.1
libopenssl1_0_0-steam-32bit-debuginfo - update to 1.0.2p-150000.3.65.1
openssl-1_0_0-cavs-debuginfo - update to 1.0.2p-150000.3.65.1
libopenssl1_0_0-steam - update to 1.0.2p-150000.3.65.1
openssl-1_0_0-cavs - update to 1.0.2p-150000.3.65.1
libopenssl1_0_0-steam-debuginfo - update to 1.0.2p-150000.3.65.1
libopenssl1_0_0-32bit-debuginfo - update to 1.0.2p-150000.3.65.1
libopenssl1_0_0-steam-32bit - update to 1.0.2p-150000.3.65.1
libopenssl-1_1-devel - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1 - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-debuginfo - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-hmac - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
openssl-1_1 - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
openssl-1_1-debuginfo - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
openssl-1_1-debugsource - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl-1_1-devel-32bit - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-32bit - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-32bit-debuginfo - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-hmac-32bit - addressed in versions 1.1.0i-150100.14.42.1, 1.1.1d-2.75.1, 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
libopenssl1_1-debuginfo-32bit - update to 1.1.1d-2.75.1
openssl-1_1-doc - addressed in versions 1.1.1d-150200.11.57.1, 1.1.1l-150400.7.22.1
openssl-devel - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl-debuginfo - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl-debugsource - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl-libs - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl-help - addressed in versions 1.1.1f-22, 1.1.1m-16
openssl11 - update to 1.1.1k-5.el7
compat-openssl11 (Red Hat package) - addressed in versions 1.1.1k-5.el9_4.1, 1.1.1k-5.el9_6.1
openssl-perl - update to 1.1.1m-16
jws5-tomcat-native (Red Hat package) - addressed in versions 1.2.31-14.redhat_14.el7jws, 1.2.31-14.redhat_14.el8jws, 1.2.31-14.redhat_14.el9jws
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.18-2.el7jbcs, 1.3.18-2.el8jbcs
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-23.el7jbcs, 1.15.19-23.el8jbcs
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.0-20.el7jbcs, 2.4.0-20.el8jbcs
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-24.el7jbcs, 2.9.3-24.el8jbcs
libopenssl-3-devel - update to 3.0.1-150400.4.17.1
libopenssl3 - update to 3.0.1-150400.4.17.1
libopenssl3-debuginfo - update to 3.0.1-150400.4.17.1
openssl-3-debuginfo - update to 3.0.1-150400.4.17.1
openssl-3-debugsource - update to 3.0.1-150400.4.17.1
libopenssl-3-devel-32bit - update to 3.0.1-150400.4.17.1
openssl-3-doc - update to 3.0.1-150400.4.17.1
libopenssl3-32bit-debuginfo - update to 3.0.1-150400.4.17.1
libopenssl3-32bit - update to 3.0.1-150400.4.17.1
openssl-3 - update to 3.0.1-150400.4.17.1
openssl - update to 3.0.5-1
openssl3 - update to 3.0.7-5.el8.1
openssl - addressed in versions 3.0.8-1.fc36, 3.0.8-1.fc37
redhat-release-virtualization-host (Red Hat package) - update to 4.5.3-9.el8ev
npm - update to 6.14.16-1.12.22.11.3
v8-devel - update to 7.8.279.23-1.12.22.11.3
jbcs-httpd24-curl (Red Hat package) - addressed in versions 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs
nodejs-debuginfo - update to 12.22.11-3
nodejs-devel - update to 12.22.11-3
nodejs-libs - update to 12.22.11-3
nodejs-full-i18n - update to 12.22.11-3
nodejs-docs - update to 12.22.11-3
nodejs-debugsource - update to 12.22.11-3
nodejs - update to 12.22.11-3
shim-debugsource - update to 15-26
shim-debuginfo - update to 15-26
shim - update to 15-26
edk2-devel - update to 202002-15
edk2-aarch64 - update to 202002-15
edk2-help - update to 202002-15
python3-edk2-devel - update to 202002-15
edk2-ovmf - update to 202002-15
edk2 - update to 202002-15
edk2-debugsource - update to 202002-15
edk2-debuginfo - update to 202002-15
edk2 (Red Hat package) - addressed in versions 20190829git37eef91017ad-9.el8_2.2, 20200602gitca407c7246bf-4.el8_4.3, 20220126gitbb1bba3d77-2.el8_6.1, 20220126gitbb1bba3d77-3.el9_0.2, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2
edk2-aarch64 - update to 20220126gitbb1bba3d77-4
edk2-ovmf - update to 20220126gitbb1bba3d77-4
edk2 - addressed in versions 20221117gitfff6d81270b5-13.fc36, 20221117gitfff6d81270b5-13.fc37, 20221117gitfff6d81270b5-14.fc36
HP-UX OpenSSL - update to A.01.01.01t.001
Virtualization Management Interface - addressed in versions FW1020.40, FW1030.20
cflinuxfs3 - update to 0.351.0
IBM Integrated Analytics System - update to 1.0.30.0
PowerEdge R660 - update to 1.2.1
PowerEdge C6620 - update to 1.2.1
PowerEdge R760 - update to 1.2.1
PowerEdge MX760c - update to 1.2.1
Precision 7960 Rack - update to 1.3.1
Aspera faspio Gateway - update to 1.3.2
PowerEdge R7625 - update to 1.3.11
PowerEdge R7615 - update to 1.3.11
PowerEdge R6625 - update to 1.3.11
PowerEdge R6615 - update to 1.3.11
ObjectScale - update to 1.4.0
Sterling Connect:Express for UNIX - update to 1.5.0.1611
PowerEdge T150 - update to 1.6.3
PowerEdge R250 - update to 1.6.3
PowerEdge T350 - update to 1.6.3
PowerEdge R350 - update to 1.6.3
Netcool Operations Insight - update to 1.6.10
Dell EMC Container Storage Modules - update to 1.7.0
Dell EMC Streaming Data Platform - update to 1.7.0
IBM Aspera Shares - update to 1.10.0 PL4
PowerEdge MX750c - update to 1.10.2
PowerEdge C6520 - update to 1.10.2
PowerEdge R650 - update to 1.10.2
PowerEdge R750XA - update to 1.10.2
PowerEdge XR12 - update to 1.10.2
PowerEdge XR11 - update to 1.10.2
PowerEdge R750XS - update to 1.10.2
PowerEdge R750 - update to 1.10.2
PowerEdge R650XS - update to 1.10.2
PowerEdge R450 - update to 1.10.2
PowerEdge T550 - update to 1.10.2
PowerEdge R550 - update to 1.10.2
PowerEdge XR4510c - update to 1.10.4
PowerEdge XR4520c - update to 1.10.4
Cloud Pak for Security (CP4S) - update to 1.10.12.0
PowerEdge T40 - update to 1.12.0
Secured Component Verification (SCV) - update to 1.92.0
Spectrum Discover - addressed in versions 2.0.4.8, 2.1.1
IBM MQ Operator - addressed in versions 2.0.10, 2.3.2
IBM Cloud Pak System - update to 2.3.4.0
Cloud Pak for Network Automation - update to 2.4.5
IBM Spectrum Conductor - update to 2.5.1 FP2
VMware Tanzu Operations Manager - update to 2.10.53
PowerEdge XE8545 - update to 2.11.2
PowerEdge R7525 - update to 2.11.3
PowerEdge C6525 - update to 2.11.3
PowerEdge R6525 - update to 2.11.3
Dell EMC XC Core XC7525 - update to 2.11.3
PowerEdge R6515 - update to 2.11.4
PowerEdge R7515 - update to 2.11.4
Dell EMC NX440 - update to 2.13.1
PowerEdge R340 - update to 2.13.1
PowerEdge R240 - update to 2.13.1
PowerEdge T340 - update to 2.13.1
PowerEdge T140 - update to 2.13.1
Precision 7910 Rack - update to 2.17.0
Avamar Data Store Gen5A - update to 2.18.1
DSS 8440 - update to 2.18.1
Dell EMC XC Core XCXR2 - update to 2.18.1
PowerEdge M640 (for PE VRTX) - update to 2.18.1
PowerEdge MX740C - update to 2.18.1
PowerEdge MX840C - update to 2.18.1
Dell EMC XC Core XC6520 - update to 2.18.1
Dell EMC XC Core XC750xa - update to 2.18.1
Dell EMC XC Core XC750 - update to 2.18.1
Dell EMC XC Core XC650 - update to 2.18.1
Dell EMC XC Core XC450 - update to 2.18.1
PowerEdge R740XD - update to 2.18.1
Dell EMC XC Core XC940 System - update to 2.18.1
Dell EMC XC Core XC740xd2 - update to 2.18.1
Dell EMC XC Core XC740xd System - update to 2.18.1
Dell EMC XC Core XC640 System - update to 2.18.1
Dell EMC XC Core 6420 System - update to 2.18.1
Dell EMC Storage NX3340 - update to 2.18.1
Dell EMC Storage NX3240 - update to 2.18.1
PowerEdge C4140 - update to 2.18.1
PowerEdge R740 - update to 2.18.1
PowerEdge R640 - update to 2.18.1
PowerEdge M640 - update to 2.18.1
PowerEdge FC640 - update to 2.18.1
PowerEdge R940 - update to 2.18.1
PowerEdge R540 - update to 2.18.1
PowerEdge R440 - update to 2.18.1
PowerEdge T440 - update to 2.18.1
PowerEdge XR2 - update to 2.18.1
PowerEdge C6420 - update to 2.18.1
PowerEdge T640 - update to 2.18.1
PowerEdge R940XA - update to 2.18.1
PowerEdge R840 - update to 2.18.1
PowerEdge R740XD2 - update to 2.18.1
Precision 7920 Rack - update to 2.18.2
IBM MaaS360 Base Module - update to 3.000.100
MaaS360 PKI Certificate Module - update to 3.000.100
MaaS360 Configuration Utility - update to 3.000.100
IBM MaaS360 VPN Module - update to 3.000.100
IBM MaaS360 Mobile Enterprise Gateway - update to 3.000.100
IBM MaaS360 Cloud Extender Agent - update to 3.000.100.069
TeleControl Server Basic - update to 3.1.2
SIMATIC MV560 X - update to 3.3.4
SIMATIC MV560 U - update to 3.3.4
SIMATIC MV550 S - update to 3.3.4
SIMATIC MV540 H - update to 3.3.4
SIMATIC MV540 S - update to 3.3.4
SIMATIC MV550 H - update to 3.3.4
PowerStore T - update to 3.5.0.1-2083289
IBM Cloud Transformation Advisor - update to 3.5.1
Dell EMC PowerStore Family Operating System - update to 4.0.0.0-2284811
IBM Tivoli Netcool System Service Monitors/Application Service Monitors - update to 4.0.1 SP11
IBM Cloud Pak for Watson AIOps - update to 4.2.1
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.0
IBM Decision Optimization for Cloud Pak for Data - update to 4.7
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 4.7
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0
Events Operator - update to 4.8.0
Data Replication on Cloud Pak for Data - update to 4.8.0
DB2 Warehouse on Cloud Pak for Data - update to 4.8.2
DB2 on Cloud Pak for Data - update to 4.8.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.2
EMC ViPR SRM - update to 4.9.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
App Connect Enterprise Certified Container - addressed in versions 5.0.6, 8.1.0
IBM Spectrum Control - update to 5.4.10.1
Dell Secure Connect Gateway - update to 5.28.00.14
Session Smart Router - addressed in versions 6.2.3-r2, 6.2.10, 6.3.7
IBM Safer Payments - addressed in versions 6.3.1.04, 6.4.2.03, 6.5.0.01
XtremIO X2 - update to 6.4.2-13
SCALANCE XR528-6M - update to 6.6.1
SCALANCE XR526-8C - update to 6.6.1
SCALANCE XR552-12M - update to 6.6.1
SCALANCE XR524-8C - update to 6.6.1
SCALANCE XM416-4C - update to 6.6.1
SCALANCE XM408-8C - update to 6.6.1
SCALANCE XM408-4C - update to 6.6.1
Dell EMC VxRail Appliance - update to 7.0.411
IBM Spectrum Symphony - update to 7.3.2
IBM QRadar Network Packet Capture - update to 7.5.0 Update Package 6
IBM Spectrum Protect Client Management Service - update to 8.1.17.2
RSA Authentication Manager - update to 8.7 Patch 4
Virtualization Engine TS7700 3957-VED - addressed in versions 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.103.23 VTD_EXEC.279, 8.53.0.63 VTD_EXEC.279, 8.53.1.21 VTD_EXEC.279
Virtualization Engine TS7700 3957-VEC - addressed in versions 8.51.2.12 VTD_EXEC.279, 8.52.102.13 VTD_EXEC.279, 8.52.103.23 VTD_EXEC.279
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.53.0.63 VTD_EXEC.279, 8.53.1.21 VTD_EXEC.279
IBM Rational ClearQuest - addressed in versions 9.0.2.8, 9.1.0.5, 10.0.3
IBM Rational ClearCase - addressed in versions 9.0.2.8, 9.1.0.5
IBM Power Hardware Management Console (HMC) - addressed in versions 9.2.950.0 SP3, 10.1.1020.0 SP1, 10.2.1030.0 SP1
IBM Workload Scheduler - addressed in versions 9.4.0.7, 9.5.0.6, 10.1.0.3
PowerScale OneFS - addressed in versions 9.5.0.2, 12.0
IBM API Connect - addressed in versions 10.0.1.12, 10.0.5.3
IBM DataPower Gateway - addressed in versions 10.0.1.12, 10.0.4.0sr3, 10.5.0.4, 2018.4.1.26
IBM Security Verify Access - update to 10.0.6.0
IBM CICS TX Advanced - update to 10.1.0.0 ifix16
IBM Spectrum Protect Plus - update to 10.1.14
IBM Watson Explorer Foundational Components - update to 11.0.2.15
Event Streams - update to 11.2.3
InfoSphere Master Data Management - addressed in versions 11.6.0.12 IF003, 12.0.0.0 IF006
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1
IBM Watson Explorer Deep Analytics Edition Foundational Components - update to 12.0.3.11
EMC Cloud Tiering Appliance - update to 13.2.0.2.22
Dell Data Protection Central - update to 19.11.0-2
NetWorker Management Console - addressed in versions 19.11.0.3, 19.12.0.0
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
PowerProtect Data Manager - update to 19.19.0-15
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.21, 22.0.2.5
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.4, 23.0.5
Junos cRPD - update to 23.4R1
Juniper Cloud Native Router - update to 23.4R1
Splunk Security Orchestration, Automation and Response (SOAR) - update to 41.0.1
Gaia - update to R81.10 Take 95
IBM DS8000 Hardware Management Console - update to 89.33.34.0
dev-libs/openssl - update to 3.0.10
openssl - update to 1.1.1t
openssl-solibs - update to 1.1.1t
libssl1.1 (Ubuntu package) - addressed in versions 1.1.1-1ubuntu2.1~18.04.21, 1.1.1f-1ubuntu2.17
openssl (Debian package) - update to 1.1.1n-0+deb11u4
libssl3 (Ubuntu package) - addressed in versions 3.0.2-0ubuntu1.8, 3.0.5-2ubuntu2.1
libnode-dev (Ubuntu package) - update to 12.22.9~dfsg-1ubuntu3.3
libnode72 (Ubuntu package) - update to 12.22.9~dfsg-1ubuntu3.3
nodejs (Ubuntu package) - update to 12.22.9~dfsg-1ubuntu3.3
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2

External References

Related Security Bulletins