CVE-2023-3446

Summary

CVE-2023-3446: Excessively long DH keys or parameters used in OpenSSL functions DH_check(), DH_check_ex(), and EVP_PKEY_param_check() can cause prolonged delays, potentially leading to a Denial of Service (DoS) attack. Affected applications may call these functions with untrusted key or parameter inputs, allowing an attacker to exploit this vulnerability. The SSL/TLS implementation in OpenSSL is not affected, but the dhparam and pkeyparam command line applications are vulnerable when using the '-check' option. The OpenSSL 3.0 and 3.1 FIPS providers are also not affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.