ID de Prueba:	1.3.6.1.4.1.25623.1.0.149017
Categoría:	Denial of Service
Título:	OpenSSL: X.509 Policy Constraints Double Locking Vulnerability (Dec 2022) - Windows
Resumen:	OpenSSL is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy processing being enabled on a publicly facing server is not considered to be a common setup. Policy processing is enabled by passing the '-policy' argument to the command line utilities or by calling either 'X509_VERIFY_PARAM_add0_policy()' or 'X509_VERIFY_PARAM_set1_policies()' functions. Affected Software/OS: OpenSSL versions 3.0.0 through 3.0.7. Solution: Update to version 3.0.8 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3996 OpenSSL Advisory https://www.openssl.org/news/secadv/20221213.txt https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.