REDHAT-BUG-2182561
First published: Wed Mar 29 2023(Updated: )
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function. <a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c</a> <a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb</a> <a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95</a> <a href="https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a">https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a</a> <a href="https://www.openssl.org/news/secadv/20230328.txt">https://www.openssl.org/news/secadv/20230328.txt</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OpenSSL |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a
- https://www.openssl.org/news/secadv/20230328.txt
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182591
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182596
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182592
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182597
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182593
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182598
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182594
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182599
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182589
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182590
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182595
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2182600
- https://access.redhat.com/errata/RHSA-2023:3722
- https://access.redhat.com/security/cve/cve-2023-0465
- https://access.redhat.com/errata/RHSA-2023:7622
- https://access.redhat.com/errata/RHSA-2023:7623
- https://access.redhat.com/errata/RHSA-2023:7625
- https://access.redhat.com/errata/RHSA-2023:7626
- https://bugzilla.redhat.com/show_bug.cgi?id=2182561
Frequently Asked Questions
What is the severity of REDHAT-BUG-2182561?
The severity of REDHAT-BUG-2182561 is critical due to potential exploitation by a malicious Certificate Authority.
How do I fix REDHAT-BUG-2182561?
To fix REDHAT-BUG-2182561, update OpenSSL to the latest version that addresses this vulnerability.
Who is affected by REDHAT-BUG-2182561?
Applications that utilize non-default options for certificate verification in OpenSSL are affected by REDHAT-BUG-2182561.
What kind of attack is possible with REDHAT-BUG-2182561?
REDHAT-BUG-2182561 allows an attacker to circumvent certificate checks, potentially leading to man-in-the-middle attacks.
Is REDHAT-BUG-2182561 specific to any version of OpenSSL?
REDHAT-BUG-2182561 affects various versions of OpenSSL but details about specific versions can be found in the security advisory.
- agent/type
- agent/references
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-0465
- agent/last-modified-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/openssl
- canonical/openssl