ID de Prueba:	1.3.6.1.4.1.25623.1.0.114276
Categoría:	Denial of Service
Título:	OpenSSL DoS Vulnerability (20240115) - Linux
Resumen:	OpenSSL is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Vulnerability Impact: Where the key that is being checked has been obtained from an untrusted source this may lead to a DoS. Affected Software/OS: OpenSSL versions 3.0, 3.1 and 3.2. Solution: Update to version 3.0.13, 3.1.5, 3.2.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-6237 3.0.13 git commit https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a 3.1.5 git commit https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294 3.2.1 git commit https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d OpenSSL Advisory https://www.openssl.org/news/secadv/20240115.txt http://www.openwall.com/lists/oss-security/2024/03/11/1
Copyright	Copyright (C) 2024 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.