Resource management error in OpenSSL - CVE-2023-3817

Vulnerability identifier: #VU78798

CSH Severity: Low

CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-3817

CWE-ID: CWE-399

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application when checking the long DH keys. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

OpenSSL
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
F5OS
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Fedora
SUSE Enterprise Storage
IBM i
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Anolis OS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
SUSE Linux Enterprise Server 12 SP2 BCL
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
Legacy Module
openSUSE Leap
Ubuntu
openEuler
Junos OS Evolved
SIMATIC S7-1500 TM MFP
BIG-IP
Dell G15 5511
Alienware m15 R6
XPS 8960
FOS Firmware
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
Data Lakehouse
Red Hat OpenShift Builds
Migration Toolkit for Runtimes
Service Telemetry Framework
Cryostat
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
IBM Rational Build Forge
Tenable Nessus
Oracle HTTP Server
NetWorker
IBM Automation Decision Services
Multicluster GlobalHub
Sensor Proxy
Service Interconnect
IBM MQ Operator
Ansible Automation Platform
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Red Hat OpenShift distributed tracing (RHOSDT)
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
EasyApache
App Connect Enterprise Certified Container
IBM Spectrum Control
Red Hat Migration Toolkit for Applications
Session Smart Router
IBM Rational ClearCase
IBM Rational ClearQuest
IBM Workload Scheduler
IBM Security Verify Governance
IBM Power Hardware Management Console (HMC)
InfoSphere Master Data Management
Red Hat OpenStack
PowerProtect Data Manager
Telemetry Dashboard
Dell EMC PowerProtect Data Protection
Liquidware
Oracle Business Intelligence Enterprise Edition
webMethods Managed File Transfer
Citrix Workspace App
Webex App VDI
ObjectScale
Storage Defender – Data Protect
Secured Component Verification (SCV)
IBM Planning Analytics Workspace
Storage Copy Data Management
IBM OS Image for Red Hat Linux Systems
Enterprise SONiC
IBM Cloud Pak for Watson AIOps
Storage Protect Client
Index Engines CyberSense
Storage Virtualize
Maximo Application Suite - Edge Data Collector
IBM supplied MQ Advanced container images
IBM Sterling Order Management
SmartFabric OS10
Cognos Transformer
Dell Data Protection Central
Voice Gateway
Cisco Webex Meetings
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Traffix SDC
JD Edwards EnterpriseOne Tools
VMware Horizon Client
JBoss Web Server
IBM Qradar SIEM
Nessus Agent
TeleControl Server Basic
Event Streams
NetWorker Management Console
Red Hat Single Sign-On
BIG-IQ Centralized Management
IBM Security Verify Access
MySQL Enterprise Monitor
IBM InfoSphere Information Server
MySQL Connectors
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libssl1.0.0 (Ubuntu package)
openssl (Ubuntu package)
libssl1.1 (Ubuntu package)
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
openssl
libopenssl1_0_0
openssl-doc
libopenssl1_0_0-debuginfo
libopenssl1_0_0-debuginfo-32bit
openssl-debuginfo
openssl-debugsource
libopenssl1_0_0-32bit
libopenssl1_0_0-hmac-32bit
libopenssl1_0_0-hmac
libopenssl-devel
openssl-1_0_0-debuginfo
openssl-1_0_0-debugsource
libopenssl-1_0_0-devel
libopenssl-1_0_0-devel-32bit
openssl-1_0_0
openssl-1_0_0-doc
openssl-1_0_0-cavs-debuginfo
libopenssl1_0_0-steam-32bit-debuginfo
libopenssl1_0_0-32bit-debuginfo
libopenssl1_0_0-steam-32bit
libopenssl10-debuginfo
libopenssl1_0_0-steam-debuginfo
libopenssl1_0_0-steam
openssl-1_0_0-cavs
libopenssl10
openssl-1_1-debugsource
openssl-1_1
libopenssl-1_1-devel
libopenssl1_1-hmac
libopenssl1_1-debuginfo
libopenssl1_1-32bit
libopenssl-1_1-devel-32bit
libopenssl1_1-hmac-32bit
libopenssl1_1-32bit-debuginfo
openssl-1_1-debuginfo
libopenssl1_1
libopenssl1_1-debuginfo-32bit
openssl-1_1-doc
openssl-libs
openssl-help
openssl-devel
openssl11
openssl-perl
openssl (Red Hat package)
libopenssl1_1-64bit-debuginfo
libopenssl1_1-64bit
libopenssl1_1-hmac-64bit
libopenssl-1_1-devel-64bit
openssl1.1
openssl1.1-devel
openssl1.1-doc
openssl-solibs
jws5-tomcat-native (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libssl3 (Ubuntu package)
openssl-fips-provider (Red Hat package)
openssl-3-debugsource
openssl-3-doc
libopenssl3-64bit
libopenssl3-64bit-debuginfo
libopenssl-3-devel-64bit
libopenssl3-debuginfo
openssl-3
libopenssl3
openssl-3-debuginfo
libopenssl-3-devel
libopenssl-3-devel-32bit
libopenssl3-32bit-debuginfo
libopenssl3-32bit
dev-libs/openssl
jbcs-httpd24-curl (Red Hat package)
jws5-tomcat (Red Hat package)
edk2 (Ubuntu package)
edk2-devel
edk2
edk2-debuginfo
edk2-debugsource
edk2-ovmf
edk2-aarch64
edk2-help
python3-edk2-devel
Splunk Enterprise
Splunk Universal Forwarder
IBM Storage Scale System
IBM App Connect Enterprise
IBM CICS TX Advanced
Cisco Jabber
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Red Hat OpenShift GitOps
IBM Integrated Analytics System
IBM Cloud Pak System
JBoss Core Services
SIMATIC MV500
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
RecoverPoint for VMs
Dell EMC VxRail Appliance
IBM Cognos Analytics

Install update from vendor's website.

OpenSSL - addressed in versions 1.0.2zi, 1.1.1v, 3.0.10, 3.1.2
Red Hat OpenShift Serverless - addressed in versions 1.31.1, 1.32.0
Data Lakehouse - update to 1.1.0.0
Red Hat OpenShift Builds - update to 1.0.1
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
Voice Gateway - update to 1.0.8.12
Migration Toolkit for Runtimes - addressed in versions 1.2.4, 1.2.5
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.15, 1.8.3, 1.8.4
Dell EMC PowerProtect Data Protection - update to 2.7.8
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.8.5, 2.9.2, 2.9.3, 2.10.5
Red Hat Advanced Cluster Security for Kubernetes - addressed in versions 3.74.8, 4.1.6, 4.2.4
Red Hat OpenShift Container Platform - addressed in versions 4.11.57, 4.12.53, 4.13.45, 4.14.32, 4.14.33, 4.17.0
JBoss Web Server - update to 5.7.7
OpenShift Logging - update to 5.7.10
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
IBM Qradar SIEM - update to 7.5.0 Update Pack 8
Red Hat Single Sign-On - update to 7.6.6
IBM Rational Build Forge - update to 8.0.0.25
Splunk Enterprise - addressed in versions 9.0.7, 9.1.2
Splunk Universal Forwarder - addressed in versions 9.0.7, 9.1.2
JD Edwards EnterpriseOne Tools - update to 9.2.8.2
Nessus Agent - update to 10.4.3
Tenable Nessus - update to 10.5.4
IBM App Connect Enterprise - addressed in versions 11.0.0.23, 12.0.10.0
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
BIG-IP - addressed in versions 17.1.2, 20.1.0
NetWorker - addressed in versions 19.11.0.3, 19.11.0.6, 19.12.0.0, 19.12.0.2
Junos OS Evolved - addressed in versions 22.1R3-S5-EVO, 22.2R3-S3-EVO, 22.3R3-S2-EVO, 22.4R3-S1-EVO, 23.2R2-EVO, 23.4R1-EVO
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
IBM Automation Decision Services - update to 24.0.0.0.4
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
libssl1.0.0 (Ubuntu package) - update to Ubuntu Pro
openssl (Ubuntu package) - addressed in versions Ubuntu Pro, 1.1.1f-1ubuntu2.20
libssl1.1 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.1.1f-1ubuntu2.20
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-19.el7jbcs, 1.0.0-19.el8jbcs
Multicluster GlobalHub - update to 1.0.2
openssl - update to 1.0.2j-60.104.1
libopenssl1_0_0 - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
openssl-doc - update to 1.0.2j-60.104.1
libopenssl1_0_0-debuginfo - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl1_0_0-debuginfo-32bit - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1
openssl-debuginfo - update to 1.0.2j-60.104.1
openssl-debugsource - update to 1.0.2j-60.104.1
libopenssl1_0_0-32bit - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl1_0_0-hmac-32bit - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl1_0_0-hmac - addressed in versions 1.0.2j-60.104.1, 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl-devel - update to 1.0.2j-60.104.1
openssl-1_0_0-debuginfo - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
openssl-1_0_0-debugsource - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl-1_0_0-devel - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
libopenssl-1_0_0-devel-32bit - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
openssl-1_0_0 - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
openssl-1_0_0-doc - addressed in versions 1.0.2p-3.84.1, 1.0.2p-150000.3.85.1
openssl-1_0_0-cavs-debuginfo - update to 1.0.2p-150000.3.85.1
libopenssl1_0_0-steam-32bit-debuginfo - update to 1.0.2p-150000.3.85.1
libopenssl1_0_0-32bit-debuginfo - update to 1.0.2p-150000.3.85.1
libopenssl1_0_0-steam-32bit - update to 1.0.2p-150000.3.85.1
libopenssl10-debuginfo - update to 1.0.2p-150000.3.85.1
libopenssl1_0_0-steam-debuginfo - update to 1.0.2p-150000.3.85.1
libopenssl1_0_0-steam - update to 1.0.2p-150000.3.85.1
openssl-1_0_0-cavs - update to 1.0.2p-150000.3.85.1
libopenssl10 - update to 1.0.2p-150000.3.85.1
Sensor Proxy - update to 1.0.8
openssl-1_1-debugsource - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
openssl-1_1 - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl-1_1-devel - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-hmac - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-debuginfo - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-32bit - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl-1_1-devel-32bit - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-hmac-32bit - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-32bit-debuginfo - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
openssl-1_1-debuginfo - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1 - addressed in versions 1.1.0i-150100.14.65.6, 1.1.1d-2.98.1, 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-debuginfo-32bit - update to 1.1.1d-2.98.1
openssl-1_1-doc - addressed in versions 1.1.1d-150200.11.75.1, 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
openssl-libs - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl-help - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl-debuginfo - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl-devel - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl-debugsource - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl - addressed in versions 1.1.1f-27, 1.1.1f-29
openssl11 - update to 1.1.1k-6.el7
openssl - addressed in versions 1.1.1k-12.0.1, 3.0.12-2
openssl-devel - addressed in versions 1.1.1k-12.0.1, 3.0.12-2
openssl-libs - addressed in versions 1.1.1k-12.0.1, 3.0.12-2
openssl-perl - addressed in versions 1.1.1k-12.0.1, 3.0.12-2
openssl (Red Hat package) - addressed in versions 1.1.1k-12.el8_6, 1.1.1k-12.el8_8, 1.1.1k-12.el8_9, 3.0.7-27.el9
libopenssl1_1-64bit-debuginfo - addressed in versions 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-64bit - addressed in versions 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl1_1-hmac-64bit - addressed in versions 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
libopenssl-1_1-devel-64bit - addressed in versions 1.1.1l-150400.7.53.1, 1.1.1l-150500.17.15.1
openssl1.1 - update to 1.1.1q-11
openssl1.1-devel - update to 1.1.1q-11
openssl1.1-doc - update to 1.1.1q-11
openssl - update to 1.1.1v
openssl-solibs - update to 1.1.1v
jws5-tomcat-native (Red Hat package) - addressed in versions 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws
OpenShift API for Data Protection (OADP) - update to 1.3.2
jbcs-httpd24-mod_proxy_cluster (Red Hat package) - addressed in versions 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs
ObjectScale - update to 1.4.0
Storage Defender – Data Protect - update to 1.4.1
Service Interconnect - update to 1.5.4
Network Observability plugin for the Openshift Console - update to 1.6.0
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-103.el7jbcs, 1.6.1-103.el8jbcs
Red Hat OpenShift GitOps - addressed in versions 1.12.5, 1.13.1
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs
Dell G15 5511 - update to 1.26.0
Alienware m15 R6 - update to 1.27.0
Secured Component Verification (SCV) - update to 1.92.0
IBM MQ Operator - addressed in versions 2.0.18, 2.4.7, 3.0.1
IBM Planning Analytics Workspace - addressed in versions 2.0.95, 2.1.2
Storage Copy Data Management - update to 2.2.23.0
XPS 8960 - update to 2.3.0
IBM Cloud Pak System - update to 2.3.4.1
Ansible Automation Platform - update to 2.4
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.2
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.4.24-2.el7jbcs, 2.4.24-2.el8jbcs
JBoss Core Services - update to 2.4.57 SP2
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.57-7.el7jbcs, 2.4.57-7.el8jbcs
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.3-32.el7jbcs, 2.9.3-32.el8jbcs
Custom Metrics Autoscaler Operator for Red Hat OpenShift - update to 2.12.1-394
libssl3 (Ubuntu package) - addressed in versions 3.0.2-0ubuntu1.12, 3.0.8-1ubuntu1.4, 3.0.10-1ubuntu2.1
openssl-fips-provider (Red Hat package) - update to 3.0.7-2.el9
openssl - update to 3.0.8-1
openssl-3-debugsource - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
openssl-3-doc - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3-64bit - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3-64bit-debuginfo - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl-3-devel-64bit - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3-debuginfo - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
openssl-3 - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3 - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
openssl-3-debuginfo - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl-3-devel - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl-3-devel-32bit - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3-32bit-debuginfo - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
libopenssl3-32bit - addressed in versions 3.0.8-150400.4.34.1, 3.0.8-150400.4.37.1, 3.0.8-150500.5.11.1, 3.0.8-150500.5.14.1
dev-libs/openssl - update to 3.0.10
openssl-doc - update to 3.0.12-2
Red Hat OpenShift distributed tracing (RHOSDT) - update to 3.1.0
TeleControl Server Basic - update to 3.1.2
SIMATIC MV500 - update to 3.3.5
Red Hat OpenShift Dev Spaces - update to 3.16.0
IBM OS Image for Red Hat Linux Systems - update to 4.0.4.0
Enterprise SONiC - update to 4.1.2
IBM Cloud Pak for Watson AIOps - update to 4.7.0
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.7
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.0
EMC ViPR SRM - update to 4.10.0.0
OpenShift Virtualization - update to 4.14.6
EasyApache - update to 4 2023-8-9
App Connect Enterprise Certified Container - addressed in versions 5.0.15, 11.3.0
IBM Spectrum Control - update to 5.4.11
RecoverPoint for VMs - update to 6.0.SP1.P1
IBM Storage Scale System - addressed in versions 6.1.9.5, 6.2.2.0
Red Hat Migration Toolkit for Applications - addressed in versions 6.2.3, 7.0.3
Session Smart Router - addressed in versions 6.2.3-r2, 6.2.10, 6.3.7
Dell EMC VxRail Appliance - update to 8.0.120
OpenShift Container Platform for Windows Containers - addressed in versions 8.1.3, 10.15.3
Storage Protect Client - update to 8.1.23.0
Index Engines CyberSense - update to 8.4
jbcs-httpd24-curl (Red Hat package) - addressed in versions 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs
Storage Virtualize - addressed in versions 8.7.0.3, 8.7.2.0
IBM Integrated Analytics System - update to 8.8.24.10.SP1
Maximo Application Suite - Edge Data Collector - update to 8.11.2
jws5-tomcat (Red Hat package) - addressed in versions 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws
IBM Rational ClearCase - addressed in versions 9.1.0.6, 10.0.1.1
IBM Rational ClearQuest - addressed in versions 9.1.0.6, 10.0.5
FOS Firmware - addressed in versions 9.1.1d, 9.2.0b, 9.2.1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.15-r1, 9.3.3.3-r1, 9.3.4.1-r1
IBM Workload Scheduler - addressed in versions 9.5.0.7, 10.1.0.4, 10.2.1
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Security Verify Access - update to 10.0.7.0
IBM Sterling Order Management - update to 10.0.2403.1
IBM CICS TX Advanced - update to 10.1.0.0 ifix24
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP2, 10.3.1060.0
SmartFabric OS10 - update to 10.5.6.1
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2
Cognos Transformer - update to 11.1.7 Fix Pack 8
Event Streams - update to 11.3.1
InfoSphere Master Data Management - addressed in versions 11.6.0.12 IF003, 12.0.0.0 IF006
IBM InfoSphere Information Server - update to 11.7.1 Fix Pack 5
Red Hat OpenStack - addressed in versions 16.2, 17.1
Dell Data Protection Central - update to 19.11.0-2
NetWorker Management Console - addressed in versions 19.11.0.3, 19.12.0.0
PowerProtect Data Manager - update to 19.19.0-15
edk2 (Ubuntu package) - addressed in versions 2022.02-3ubuntu0.22.04.4, 2022.02-3ubuntu0.22.04.5, 2024.02-2ubuntu0.6, 2024.02-2ubuntu0.7, 2025.02-3ubuntu2.2
edk2-devel - addressed in versions 202011-28, 202308-25
edk2 - addressed in versions 202011-28, 202308-25
edk2-debuginfo - addressed in versions 202011-28, 202308-25
edk2-debugsource - addressed in versions 202011-28, 202308-25
edk2-ovmf - addressed in versions 202011-28, 202308-25
edk2-aarch64 - addressed in versions 202011-28, 202308-25
edk2-help - addressed in versions 202011-28, 202308-25
python3-edk2-devel - addressed in versions 202011-28, 202308-25

• https://www.openssl.org/news/secadv/20230731.txt

• Denial of service in OpenSSL
• Slackware Linux update for openssl
• Tenable Nessus update for OpenSSL
• SUSE update for openssl-3
• SUSE update for openssl-3
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• SUSE update for openssl-1_0_0
• Multiple vulnerabilities in Tenable Sensor Proxy
• Multiple vulnerabilities in cPanel EasyApache
• SUSE update for openssl-1_0_0
• SUSE update for openssl-1_0_0
• SUSE update for openssl-3
• SUSE update for openssl-1_1
• Multiple vulnerabilities in IBM i
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• Amazon Linux AMI update for openssl
• Multiple vulnerabilities in MySQL Connectors
• Multiple vulnerabilities in MySQL Enterprise Monitor
• Ubuntu update for openssl
• Ubuntu update for openssl
• SUSE update for openssl-3
• SUSE update for openssl-3
• Ubuntu update for openssl
• Multiple vulnerabilities in IBM Storage Defender - Data Protect
• Multiple vulnerabilities in Tenable Nessus Agent
• Multiple vulnerabilities in Siemens SIMATIC MV500
• Splunk Enterprise update for third-party components
• Splunk Universal Forwarder update for third-party components
• Fedora EPEL 7 update for openssl11
• Multiple vulnerabilities in IBM Rational Build Forge
• IBM App Connect Enterprise update for OpenSSL
• Multiple vulnerabilities in Dell EMC Enterprise SONiC
• Multiple vulnerabilities in Index Engines CyberSense
• Amazon Linux AMI update for openssl
• Multiple vulnerabilities in Red Hat JBoss Web Server 5.7
• Multiple vulnerabilities in JBoss Enterprise Web Server 5 for RHEL 7, 8, and 9
• Multiple vulnerabilities in Red Hat JBoss Core Services Apache HTTP Server 2.4
• Multiple vulnerabilities in Red Hat JBoss Core Services for RHEL 7 and 8
• Multiple vulnerabilities in IBM Spectrum Control
• Red Hat Enterprise Linux 8 update for openssl
• Multiple vulnerabilities in Red Hat Single Sign-On 7.6
• Red Hat Enterprise Linux 8.8 Extended Update Support update for openssl
• Red Hat Enterprise Linux 8.6 Extended Update Support update for openssl
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• Multiple vulnerabilities in Oracle HTTP Server
• Multiple vulnerabilities in Logging Subsystem 5.7 for Red Hat OpenShift
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.74
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.9
• Resource management error in IBM Event Streams
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Red Hat build of Cryostat 2 on RHEL 8
• Dell Platform BIOS update for OpenSSL
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Gentoo update for OpenSSL
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in IBM Cognos Transformer
• Multiple vulnerabilities in IBM Cognos Analytics
• Multiple vulnerabilities in Red Hat Multicluster GlobalHub
• Multiple vulnerabilities in Red Hat Openshift distributed tracing
• Resource management error in IBM Maximo Application Suite - Edge Data Collector
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Resource management error in IBM Rational ClearQuest
• Multiple vulnerabilities in IBM Rational ClearCase
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Ubuntu update for openssl1.0
• Multiple vulnerabilities in IBM Storage Copy Data Management
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• openEuler update for openssl
• openEuler update for openssl
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Red Hat OpenShift Builds
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.9
• Multiple vulnerabilities in the Siemens SIMATIC S7-1500 TM MFP
• Multiple vulnerabilities in Siemens Telecontrol Server Basic
• Multiple vulnerabilities in IBM Sterling Order Management
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Multiple vulnerabilities in Migration Toolkit for Runtimes 1.2
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.8
• Multiple vulnerabilities in Dell Networking OS10
• Red Hat Enterprise Linux 9 update for openssl and openssl-fips-provider
• Multiple vulnerabilities in Red Hat Migration Toolkit for Containers (MTC) 1.7
• Resource management error in IBM FOS firmware
• Multiple vulnerabilities in IBM Planning Analytics Local - IBM Planning Analytics Workspace
• Multiple vulnerabilities in IBM Workload Scheduler
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in Dell Secured Component Verification (SCV)
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Multiple vulnerabilities in Dell ThinOS
• Multiple vulnerabilities in Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.12
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Red Hat OpenStack 17.1 packages
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Service Interconnect 1.5
• Multiple vulnerabilities in IBM InfoSphere Information Server
• Multiple vulnerabilities in IBM Storage Protect Client
• Junos OS Evolved update for OpenSSL
• Multiple vulnerabilities in JD Edwards EnterpriseOne Tools
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.13
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 10.15
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 8.1
• Multiple vulnerabilities in IBM Power HMC
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• IBM InfoSphere Master Data Management update for OpenSSL
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• IBM Integrated Analytics System update for OpenSSL
• F5 BIG-IP update for OpenSSL
• Multiple vulnerabilities in BIG-IQ Centralized Management openssl component
• Multiple vulnerabilities in F5OS openssl component
• Multiple vulnerabilities in Traffix SDC OpenSSL component
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Amazon Linux AMI update for openssl
• Amazon Linux AMI update for openssl
• Multiple vulnerabilities in IBM Storage Virtualize
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Anolis OS update for openssl
• Anolis OS update for openssl
• PowerProtect Data Protection software update for third-party components
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Dell NetWorker and NetWorker Management Console
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• openEuler update for edk2
• openEuler 24.03 LTS SP2 update for edk2
• Multiple vulnerabilities in IBM Automation Decision Services
• Dell NetWorker update for OpenSSL
• Ubuntu update for edk2
• Ubuntu update for edk2
• Multiple vulnerabilities in IBM Automation Decision Services
• Juniper Session Smart Router update for third-party components
• Anolis OS update for openssl1.1
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0