Test ID:	1.3.6.1.4.1.25623.1.0.104535
Category:	Denial of Service
Title:	OpenSSL 1.1.1 < 1.1.1t, 3.0 < 3.0.8 DoS Vulnerability - Linux
Summary:	OpenSSL is prone to a denial of service (DoS) vulnerability.
Description:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to a double free after calling PEM_read_bio_ex. Affected Software/OS: OpenSSL version 1.1.1 and 3.0. Solution: Update to version 1.1.1t, 3.0.8 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-4450 https://security.gentoo.org/glsa/202402-08 1.1.1t git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b 3.0.8 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83 OpenSSL Advisory https://www.openssl.org/news/secadv/20230207.txt
Copyright	Copyright (C) 2023 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.