OpenSSL 1.0.2/1.1.1/3.0/3.1 DH Key crypto/dh/dh_check.c DH_check denial of service

Summaryinfo

A vulnerability was found in OpenSSL 1.0.2/1.1.1/3.0/3.1. It has been declared as problematic. The affected element is the function DH_check of the file crypto/dh/dh_check.c of the component DH Key Handler. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2023-3446. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in OpenSSL 1.0.2/1.1.1/3.0/3.1 (Network Encryption Software). Affected by this issue is the function DH_check of the file crypto/dh/dh_check.c of the component DH Key Handler. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. CVE summarizes:

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ('p' parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the '-check' option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

The weakness was published 07/19/2023 as 20230719.txt. The advisory is available at openssl.org. This vulnerability is handled as CVE-2023-3446 since 06/28/2023. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1499 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 211573 (Oracle Linux 9 : openssl / and / openssl-fips-provider (ELSA-2024-9333)), which helps to determine the existence of the flaw in a target environment.

Applying the patch 9a0a4d3c1e7138915563c0df4fe6a3f9377b839c is able to eliminate this problem. The bugfix is ready for download at git.openssl.org.

The vulnerability is also documented in the databases at Tenable (211573) and CERT Bund (WID-SEC-2023-1833). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Debian Linux
• Amazon Linux 2
• IBM AIX
• Red Hat JBoss Core Services
• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• NetApp FAS
• Gentoo Linux
• Xerox FreeFlow Print Server
• NetApp AFF
• IBM SAN Volume Controller
• IBM Rational ClearCase
• IBM Storwize
• NetApp ActiveIQ Unified Manager
• Dell NetWorker
• IBM FlashSystem
• Open Source OpenSSL
• Tenable Security Nessus
• IBM Rational ClearQuest
• IBM Rational Build Forge
• Meinberg LANTIME
• Red Hat JBoss Web Server
• Red Hat Single Sign On
• IBM Security Verify Access
• RESF Rocky Linux
• Dell PowerEdge
• IBM QRadar SIEM
• Broadcom Fabric OS
• IBM App Connect Enterprise
• IBM Storage Scale
• SolarWinds Platform

Productinfo

Type

• Network Encryption Software

Name

• OpenSSL

Version

• 1.0.2
• 1.1.1
• 3.0
• 3.1

License

• open-source

Website

• Product: https://www.openssl.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion