Test ID:	1.3.6.1.4.1.25623.1.0.114277
Category:	Denial of Service
Title:	OpenSSL DoS Vulnerability (20240115) - Windows
Summary:	OpenSSL is prone to a denial of service (DoS) vulnerability.
Description:	Summary: OpenSSL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Applications that use the function EVP_PKEY_public_check() to check RSA public keys may experience long delays. Vulnerability Impact: Where the key that is being checked has been obtained from an untrusted source this may lead to a DoS. Affected Software/OS: OpenSSL versions 3.0, 3.1 and 3.2. Solution: Update to version 3.0.13, 3.1.5, 3.2.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-6237 3.0.13 git commit https://github.com/openssl/openssl/commit/18c02492138d1eb8b6548cb26e7b625fb2414a2a 3.1.5 git commit https://github.com/openssl/openssl/commit/a830f551557d3d66a84bbb18a5b889c640c36294 3.2.1 git commit https://github.com/openssl/openssl/commit/0b0f7abfb37350794a4b8960fafc292cd5d1b84d OpenSSL Advisory https://www.openssl.org/news/secadv/20240115.txt http://www.openwall.com/lists/oss-security/2024/03/11/1
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.