CVE-2023-0216: Invalid pointer dereference in d2i_PKCS7 functions
A flaw was found in OpenSSL. An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2iPKCS7(), d2iPKCS7bio() or d2iPKCS7fp() functions. This may result in an application crash which could lead to a denial of service. The TLS implementation in OpenSSL does not call this function, however, third party applications might call these functions on untrusted data.
Other sources
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2iPKCS7(), d2iPKCS7bio() or d2iPKCS7fp() functions.
The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
— NVD
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2iPKCS7(), d2iPKCS7bio() or d2iPKCS7fp() functions.
The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 1:3.0.1-47.el9_1 - Upgrade
Upgrade
redhat/opensslto a version that resolves this vulnerability.Fixed in 1:3.0.1-46.el9_0 - Upgrade
Upgrade
rust/openssl-srcto a version that resolves this vulnerability.Fixed in 300.0.12 - Upgrade
Upgrade
debian/opensslto a version that resolves this vulnerability.Fixed in 1.1.1w-0+deb11u1Fixed in 1.1.1n-0+deb11u5Fixed in 3.0.14-1~deb12u1Fixed in 3.0.14-1~deb12u2Fixed in 3.3.2-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2023-0216?
CVE-2023-0216 is a vulnerability in OpenSSL that allows an invalid pointer dereference on read, leading to a denial of service.
How can CVE-2023-0216 be triggered?
CVE-2023-0216 can be triggered when an application tries to load malformed PKCS7 data using the d2i_PKCS7() functions in OpenSSL.
What is the severity of CVE-2023-0216?
CVE-2023-0216 has a severity level of high with a severity value of 7.
Which software versions are affected by CVE-2023-0216?
CVE-2023-0216 affects OpenSSL versions up to but excluding 3.0.7, as well as StormShield Management Center versions up to but excluding 3.3.3.
Is there a fix for CVE-2023-0216?
Yes, a fix has been provided for CVE-2023-0216. For OpenSSL, upgrade to version 1:3.0.1-47.el9_1 or 1:3.0.1-46.el9_0. For StormShield Management Center, upgrade to version 3.3.3 or later.