Resource management error in OpenSSL - CVE-2023-5678

Vulnerability identifier: #VU82894

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2023-5678

CWE-ID: CWE-399

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
OpenSSL
IBM VIOS
JBoss Core Services
IBM AIX
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
F5OS
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Fedora
SUSE Enterprise Storage
IBM i
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Cisco NX-OS
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
Legacy Module
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
Slackware Linux
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Live Patching
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
IBM Business Automation Workflow
Red Hat OpenShift Builds
Migration Toolkit for Runtimes
Service Telemetry Framework
Cryostat
IBM Cloud Transformation Advisor
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
IBM Rational Build Forge
NetWorker
IBM Automation Decision Services
Multicluster GlobalHub
Service Interconnect
IBM MQ Operator
Ansible Automation Platform
Custom Metrics Autoscaler Operator for Red Hat OpenShift
Red Hat OpenShift distributed tracing (RHOSDT)
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
EasyApache
App Connect Enterprise Certified Container
Red Hat Migration Toolkit for Applications
Session Smart Router
IBM Rational ClearQuest
IBM Rational ClearCase
IBM Workload Scheduler
Rational Application Developer
IBM Security Verify Governance
IBM QRadar WinCollect Agent
IBM Power Hardware Management Console (HMC)
InfoSphere Master Data Management
Red Hat OpenStack
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
SIMATIC S7-1500 TM MFP
BIG-IP
Inspiron 15 5510
OptiPlex 5400 All-In-One
OptiPlex 7400 All-In-One
Precision 3280 CFF
Latitude 7350 Detachable
Inspiron 24 5430 All-in-One
Precision 3680 Tower
Inspiron 27 7730 All-in-One
Inspiron 16 5640
Vostro 16 5640
OptiPlex Tower 7020
Precision 3490
Latitude 3450
OptiPlex Micro 7020
Latitude 3550
Inspiron 3030
Precision 5490
Vostro 3030
Inspiron 3030S
Alienware m16 R2
Alienware M18 R2
OptiPlex SFF 7020
Alienware x16 R2
Latitude 7450
Vostro 3030S
Latitude 7650
Latitude 5450
Precision 5690
Latitude 9450
XPS 14 9440
Precision 3590
Inspiron 16 7640 2-in-1
Latitude 5350
OptiPlex AIO 7420
Precision 3591
Latitude 5550
Latitude 7350
XPS 16 9640
Inspiron 14 7440 2-in-1
Inspiron 14 5440
Precision 7875 Tower
Vostro 14 3440
XPS 13 9340
Latitude 7030 Rugged Extreme
Inspiron 14 Plus 7440
Inspiron 16 Plus 7640
Precision 7865 Tower
Precision 5480
OptiPlex 5055 Ryzen APU
OptiPlex 5055 Ryzen CPU
OptiPlex 5055 A-Serial
Inspiron 15 3530
Vostro 15 3530
Vostro 14 3430
Inspiron 24 5420 All-in-One
XPS 17 9730
Latitude 9440 2-in-1
Precision 5680
Inspiron 27 7720 All-in-One
Precision 7780
Precision 7680
Latitude 5540
Precision 3580
Precision 3581
Latitude 5340
Latitude 3540
XPS 15 9530
Latitude 3440
Latitude 3340
Latitude 7640
Inspiron 3020 Small Desktop
ChengMing 3910
ChengMing 3911
Latitude 5495
Inspiron 14 5430
Inspiron 14 7430 2-in-1
Latitude 5440
Inspiron 16 5630
Inspiron 16 7630 2-in-1
Inspiron 3020 Desktop
Vostro 3020 Tower Desktop
OptiPlex Micro 7010
OptiPlex Micro Plus 7010
OptiPlex All-in-One 7410
OptiPlex Small Form Factor 7010
OptiPlex Small Form Factor Plus 7010
OptiPlex Tower 7010
OptiPlex Tower Plus 7010
Precision 3480
Vostro 16 5630
Latitude 7440
Vostro 3020 Small Desktop
Latitude 7340
Dell G16 7630
Inspiron 13 5330
Inspiron 14 Plus 7430
Dell G15 5530
Inspiron 16 Plus 7630
Alienware x16 R1
Alienware x14 R2
Latitude 3140
Latitude 3140 2in1
Latitude 7230 Rugged Extreme
XPS 9315 2-in-1
Alienware Aurora R15 AMD
Alienware m16 R1
Alienware m18 R1
PowerEdge T40
OptiPlex 3000 Thin Client
Inspiron 15 3521
Latitude 3530
Latitude 3430
Vostro 5320
Inspiron 13 5320
Inspiron 5410 All-In-One
Inspiron 14 7420 2-in-1
Inspiron 16 7620 2-in-1
XPS 13 9315
Inspiron 7710 All-in-One
Inspiron 3502
Latitude 9330
Precision 7770
Precision 7670
Dell G5 5000
Latitude 3330
ChengMing 3900
Vostro 5620
Inspiron 16 5620
Precision 5470
Vostro 3910
Inspiron 14 5420
Precision 3570
Vostro 3710
OptiPlex XE4 SFF
XPS 13 9305
Inspiron 3910
Latitude 5430
Latitude 5431
OptiPlex 7000 Micro
OptiPlex 5000
OptiPlex XE4 Tower
Precision 3470
OptiPlex 3000
Latitude 7430
XPS 8950
Alienware Aurora R13
XPS 15 9520
Latitude 7330
Latitude 7530
Latitude 3310 2-in-1
Latitude 5330
Latitude 5310
XPS 13 9300
Latitude 5310 2-IN-1
Latitude 5531
Latitude 5530
Vostro 7620
Inspiron 16 Plus 7620
Precision 5570
Inspiron 14 Plus 7420
Inspiron 15 3510
Precision 3571
Latitude 9430
Vostro 15 7510
Inspiron 15 7510
Alienware x17 R2
OptiPlex 7070 Ultra
Vostro 14 3420
Vostro 15 3520
Alienware x15 R2
Inspiron 16 7610
Latitude 3310
Dell G15 5510
XPS 13 7390
Inspiron 15 3520
Dell G16 7620
Dell G15 5520
Vostro 3690
Vostro 3890
XPS 17 9720
Alienware m15 R7
OptiPlex 5080
OptiPlex 5090 Micro
OptiPlex 5090
OptiPlex 7090 Tower
Inspiron 3891
Precision 3450
Vostro 5890
Precision 5770
OptiPlex 5070
Alienware x17 R1
Alienware m17 R4
Alienware m15 R4
OptiPlex 3070
Alienware x15 R1
Vostro 5880
Inspiron 7500
Wyse 5470
Precision 3440
Vostro 7500
Precision 5760
Optiplex 7090 Ultra
Inspiron 7501
Latitude 3120
XPS 17 9710
Precision 3431 Tower
OptiPlex 3090 Ultra
OptiPlex 7080
Vostro 3590
Inspiron 3880
Inspiron 3881
Latitude 3300
Wyse 5470 All-In-One
Latitude 3410
Latitude 7330 Rugged Laptop
Latitude 7400 2-in-1
Latitude 5430 Rugged Laptop
ChengMing 3990
ChengMing 3991
Latitude 3510
Inspiron 5509
Inspiron 7306 2-in-1
XPS 15 7590
Inspiron 5502
Latitude 9510 2in1
XPS 15 9500
Precision 5750
Inspiron 7506 2-in-1
Latitude 3320
Inspiron 5409
Inspiron 7700 All-In-One
Inspiron 7706 2-in-1
OptiPlex 3060
Precision 5560
Latitude 7200 2-in-1
Precision 5550
Precision 5540
Latitude 5510
Latitude 3301
Latitude 5410
OptiPlex 5060
Vostro 5402
Vostro 5502
Inspiron 5402
Precision 3550
Dell G15 5511
Dell G3 3500
Dell G5 5500
XPS 17 9700
XPS 15 9510
Inspiron 5400
Inspiron 5406 2-in-1
Inspiron 5401 AIO
Inspiron 5401
Precision 3561
OptiPlex 7490 All-in-One
Latitude 5300
Latitude 5300 2-IN-1
OptiPlex 7770 All-In-One
Vostro 3501
Vostro 3500
Vostro 3401
Latitude 5411
Latitude 5421
Vostro 3400
Vostro 15 3510
Precision 3551
Latitude 5511
Latitude 5521
Alienware m15 R6
Latitude 9420
Inspiron 3501
OptiPlex 5270 All-In-One
XPS 13 7390 2-in-1
OptiPlex 7470 All-In-One
Alienware Area 51m R2
Alienware m17 R3
Inspiron 15 3511
OptiPlex 5490 All-In-One
Precision 7760
OptiPlex 3280 All-in-One
Latitude 7210 2-in-1
Latitude 5500
Latitude 7310
Latitude 7320 Detachable
Precision 3540
Latitude 3390 2-in-1
Latitude 3400
Latitude 5400
Latitude 9520
Latitude 7410
Precision 7560
Latitude 3500
Precision 3650 Tower
Inspiron 5301
OptiPlex 5480 All-In-One
Latitude 7300
Precision 7750
Latitude 7400
Precision 7550
Latitude 9410
Inspiron 7300
Vostro 5301
Dell Precision 3430 Tower
Precision 3541
Latitude 5501
OptiPlex 7480 All-in-One
Inspiron 7400
OptiPlex 7780 All-in-One
Latitude 5401
Precision 3640
Wyse 5070
Precision 7540
Precision 7740
Precision 7730
Precision 7530
Inspiron 5400/5401
Latitude 3520
Latitude 7520
Latitude 7420
Latitude 3420
Latitude 5424 Rugged
Latitude 5420 Rugged
Latitude 7320
Latitude 7424 Rugged Extreme
Latitude 3190
Latitude 3190 2-In-1
Latitude 5520
Precision 5530
Latitude 7220 Rugged Extreme
Latitude 5320
Latitude Rugged 7220EX
Precision 3560
Latitude 5420
HPE ProLiant MicroServer Gen11
HPE ProLiant DL20 Gen11
HPE ProLiant ML30 Gen11
Latitude 7212 Rugged Extreme Tablet
HPE ProLiant DL385 Gen11 Server
HPE ProLiant DL365 Gen11 Server
HPE ProLiant DL345 Gen11 Server
HPE ProLiant DL325 Gen11 Server
Precision 5860 Tower
Precision 7960 Tower
HPE ProLiant MicroServer Gen10 Plus v2
HPE ProLiant ML30 Gen10 Plus server
HPE ProLiant DL380 Gen10 Plus server
HPE ProLiant DL360 Gen10 Plus server
HPE ProLiant DL110 Gen10 Plus Telco server
HPE ProLiant DL20 Gen10 Plus server
HPE ProLiant XL220n Gen10 Plus Server
HPE Apollo 2000 Gen10 Plus System
HPE Edgeline e920t Server Blade
HPE Edgeline e920d Server Blade
HPE Edgeline e920 Server Blade
HPE Apollo 4200 Gen10 Plus System
HPE ProLiant XL290n Gen10 Plus Server
XPS 13 Plus 9320
XPS 8960
AURORA R16
Precision 3660
HPE ProLiant DL110 Gen11
HPE ProLiant DL380a Gen11
HPE Synergy 480 Gen11 Compute Module
HPE ProLiant DL560 Gen11
HPE ProLiant DL380 Gen11 Server
HPE Alletra 4120
HPE ProLiant DL360 Gen11 Server
HPE Alletra 4110
HPE ProLiant ML350 Gen11 Server
HPE ProLiant DL320 Gen11 Server
HPE Compute Edge Server e930t
HPE ProLiant ML110 Gen11
OptiPlex 3090
XPS 8940
Alienware Aurora Ryzen Edition R14
XPS 13 9310 2-in-1
OptiPlex 3080
Inspiron 5410
Inspiron 15 5518
Vostro 14 5410
Inspiron 14 5418
Vostro 15 5510
Inspiron 145410
Vostro 3681
Vostro 13 5310
Vostro 3881
Inspiron 13 5310
Vostro 3888
Dell Precision 5820 Tower
Dell Precision 7920 Tower
Dell Precision 7820 Tower
Precision 3260 XE Compact
Precision 3460 XE Small Form Factor
Precision 3460 Small Form Factor
Precision 3260 Compact
HPE ProLiant DL385 Gen10 Server
HPE ProLiant DL325 Gen10 Plus v2 server
HPE ProLiant DL345 Gen10 Plus server
HPE ProLiant MicroServer Gen10 Plus
HPE ProLiant DL365 Gen10 Plus server
HPE ProLiant DL385 Gen10 Plus server
HPE ProLiant DL385 Gen10 Plus v2 server
HPE ProLiant DL325 Gen10 Server
HPE ProLiant MicroServer Gen10
HPE ProLiant DL20 Gen10 Server
HPE ProLiant ML30 Gen10 Server
HPE ProLiant DL325 Gen10 Plus server
HPE ProLiant XL675d Gen10 Plus Server
HPE ProLiant XL645d Gen10 Plus Server
HPE ProLiant DL360 Gen10 Server
HPE ProLiant ML350 Gen10 Server
HPE ProLiant ML110 Gen10 Server
HPE ProLiant DL560 Gen10 Server
HPE ProLiant DL380 Gen10 Server
HPE ProLiant DL180 Gen10 Server
HPE ProLiant DL160 Gen10 Server
HPE ProLiant XL190r Gen10 Server
HPE ProLiant XL170r Gen10 Server
HPE ProLiant e910t Server Blade
HPE ProLiant e910 Server Blade
HPE Synergy 660 Gen10 Compute Module
HPE Synergy 480 Gen10 Compute Module
HPE ProLiant BL460c Gen10 Server Blade
XPS 13 9310
Alienware m15 R3
Alienware x14
Dell G5 5090
Precision 3630 Tower
Precision 5820 Tower
Precision 7820 Tower
Precision 7920 Tower
OptiPlex 7450 All-In-One
OptiPlex 7460 All In One
OptiPlex 7760 All-In-One
OptiPlex 3050 All-In-One
OptiPlex 5260 All-In-One
OptiPlex 7000
Vostro 5090
Precision 3420 Tower
Precision 3620 Tower
Precision 3930 Rack
OptiPlex 5050
OptiPlex 3050
Rational Developer for i RPG and COBOL + Modernization Tools, Java Edition
Telemetry Dashboard
Guardium Data Security Center (GDSC)
Oracle Enterprise Communications Broker
Liquidware
Oracle Business Intelligence Enterprise Edition
webMethods Managed File Transfer
Citrix Workspace App
Webex App VDI
HP-UX OpenSSL
ObjectScale
Secured Component Verification (SCV)
Storage Copy Data Management
HPE Synergy 480 Gen10 Plus Compute Module
EMC ECS
IBM OS Image for Red Hat Linux Systems
IBM Cloud Pak for Watson AIOps
DB2 on Cloud Pak for Data
DB2 Warehouse on Cloud Pak for Data
Storage Resource Manager
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect Backup-Archive Client
Storage Virtualize
IBM supplied MQ Advanced container images
Red Hat OpenShift Serverless
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
Voice Gateway
Cisco Webex Meetings
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Traffix SDC
VMware Horizon Client
Intel In-Band Manageability
BIG-IQ Centralized Management
Oracle Communications Session Border Controller
SINEC NMS
Python for Scientific Computing
JBoss Web Server
IBM Qradar SIEM
TeleControl Server Basic
NetWorker Management Console
Red Hat Single Sign-On
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libssl1.0.0 (Ubuntu package)
libssl1.1 (Ubuntu package)
openssl-1_1-livepatches-debugsource
openssl-1_1-livepatches
openssl-1_1-livepatches-debuginfo
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
openssl-doc
libopenssl0_9_8-32bit
libopenssl0_9_8-hmac
libopenssl0_9_8
openssl
libopenssl0_9_8-hmac-32bit
compat-openssl098-debugsource
libopenssl0_9_8-debuginfo-32bit
libopenssl0_9_8-debuginfo
jbcs-httpd24-openssl-chil (Red Hat package)
libopenssl1_0_0
libopenssl1_0_0-32bit
openssl1-doc
openssl1
libopenssl1-devel
libopenssl1_0_0-hmac-32bit
libopenssl1_0_0-debuginfo-32bit
openssl-1_0_0-doc
libopenssl1_0_0-debuginfo
libopenssl-1_0_0-devel
openssl-1_0_0-debugsource
openssl-1_0_0-debuginfo
libopenssl-1_0_0-devel-32bit
openssl-1_0_0
libopenssl1_0_0-hmac
libopenssl1_0_0-steam-32bit-debuginfo
libopenssl1_0_0-steam-32bit
libopenssl1_0_0-32bit-debuginfo
libopenssl1_0_0-steam-debuginfo
libopenssl10-debuginfo
openssl-1_0_0-cavs
libopenssl10
openssl-1_0_0-cavs-debuginfo
libopenssl1_0_0-steam
libopenssl1_1-hmac
libopenssl1_1-32bit
libopenssl1_1-hmac-32bit
libopenssl-1_1-devel-32bit
libopenssl1_1-32bit-debuginfo
libopenssl1_1
openssl-1_1-debuginfo
openssl-1_1
libopenssl-1_1-devel
libopenssl1_1-debuginfo
openssl-1_1-debugsource
libopenssl1_1-debuginfo-32bit
openssl-1_1-doc
openssl-devel
openssl-help
openssl-libs
openssl-debuginfo
openssl-debugsource
openssl11
openssl-perl
openssl (Red Hat package)
libopenssl1_1-hmac-64bit
libopenssl1_1-64bit-debuginfo
libopenssl-1_1-devel-64bit
libopenssl1_1-64bit
openssl-solibs
jws5-tomcat-native (Red Hat package)
jbcs-httpd24-mod_proxy_cluster (Red Hat package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
libssl3 (Ubuntu package)
openssl-fips-provider (Red Hat package)
libopenssl3
libopenssl3-debuginfo
openssl-3-debuginfo
libopenssl3-64bit
openssl-3-debugsource
libopenssl-3-devel-32bit
libopenssl-3-devel-64bit
libopenssl3-64bit-debuginfo
libopenssl3-32bit-debuginfo
openssl-3-doc
libopenssl-3-devel
libopenssl3-32bit
openssl-3
jbcs-httpd24-curl (Red Hat package)
jws5-tomcat (Red Hat package)
edk2 (Ubuntu package)
edk2-ovmf
edk2-help
edk2-aarch64
edk2-devel
edk2-debugsource
edk2-debuginfo
edk2
python3-edk2-devel
IBM App Connect Enterprise
IBM CICS TX Advanced
Cisco Jabber
Siebel CRM Deployment
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Red Hat OpenShift GitOps
IBM Integrated Analytics System
OptiPlex 7070
OptiPlex 7071
Precision 3240 Compact
OptiPlex XE3
OptiPlex 7060
IBM Cloud Pak System
Dell EMC Storage Monitoring and Reporting (SMR)
IBM Storage Scale System
Dell EMC VxRail Appliance
IBM InfoSphere Information Server
Dell EMC NetWorker vProxy

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within DH_generate_key() and DH_check_pub_key() functions. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Install update from vendor's website.

• https://www.openssl.org/news/secadv/20231106.txt