{"id":"CVE-2023-0464","title":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints","summary":"A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-295","CWE-295"],"vendor":"openssl","product":"openssl","affected":["openssl >= 1.0.2, < 1.0.2zh","openssl >= 1.1.1, < 1.1.1u","openssl >= 3.0.0, < 3.0.9","openssl >= 3.1.0, < 3.1.1"],"patched":["openssl 3.1.1"],"published":"2023-03-22","updated":"2026-10-14","sourceUpdated":"2026-10-14T20:17:23.470","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","references":[{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","label":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","label":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202402-08","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","label":"openssl-security@openssl.org"},{"url":"https://www.couchbase.com/alerts/","label":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2023/dsa-5417","label":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20230322.txt","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-08","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20230406-0006/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.couchbase.com/alerts/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2023/dsa-5417","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20230322.txt","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-028723.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-077170.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-337522.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-341067.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-556635.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-625862.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-769027.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-879734.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","exploit-available"],"epss":0.03658,"epssPercentile":0.89438,"exploits":{"github":1,"githubRepos":["https://github.com/Trinadh465/Openssl_1.1.1g_CVE-2023-0464"],"checkedAt":"2026-10-14T20:53:46.784Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T20:53:12.257Z","slug":"CVE-2023-0464","body":"## Overview\n\nA security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints.  Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.\n\n## Affected\n\n- `openssl >= 1.0.2, < 1.0.2zh`\n- `openssl >= 1.1.1, < 1.1.1u`\n- `openssl >= 3.0.0, < 3.0.9`\n- `openssl >= 3.1.0, < 3.1.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `openssl 3.1.1`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":41.3,"likelihood":0.7,"exploitation":12,"ransomware":0},"changes":[]}