5.3

CVE-2023-3817: Excessive time spent checking DH q parameter value

Modified
AliasesALPINE-CVE-2023-3817SUSE-SU-2023:3239-1SUSE-SU-2023:3242-1
Published 31-07-2023Last modified 14-10-2026

Vulnerability summary

CVE-2023-3817 is a medium (CVSS 5.3) Unchecked Input for Loop Condition vulnerability in openssl. EPSS estimates a 3.05% chance of exploitation in the next 30 days, higher than 87.5% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
3.05%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 10
DLA-3530-1MGASA-2023-0253MGASA-2023-0273RHSA-2023:5931RHSA-2023:7622RHSA-2023:7625

Timeline

  1. 31-07-2023
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the "-check" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

3.05%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

No change 0.00 pp

From 3.05% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse32 products
  • openssl-1_0_0&distro=SUSE Linux Enterprise Module for Legacy 15 SP4< 1.0.2p-150000.3.85.1
  • openssl-1_0_0&distro=SUSE Linux Enterprise Module for Legacy 15 SP5< 1.0.2p-150000.3.85.1
  • openssl-1_0_0&distro=SUSE Linux Enterprise Server 12 SP5< 1.0.2p-3.84.1
  • openssl-1_0_0&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 1.0.2p-3.84.1
  • openssl-1_0_0&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 1.0.2p-3.84.1
Opensuse13 products
  • openssl-1_0_0&distro=openSUSE Leap 15.4< 1.0.2p-150000.3.85.1
  • openssl-1_0_0&distro=openSUSE Leap 15.5< 1.0.2p-150000.3.85.1
  • openssl-1_0_0&distro=openSUSE Tumbleweed< 1.0.2u-22.1
  • openssl-1_1&distro=openSUSE Leap 15.4< 1.1.1l-150400.7.53.1
  • openssl-1_1&distro=openSUSE Leap 15.5< 1.1.1l-150500.17.15.1
Chainguard5 products
  • eco-dotnet-libssl-1.0All versions (No fix recorded)
  • eco-dotnet-libssl-1.0-ld-so-confAll versions (No fix recorded)
  • openssl< 3.1.1-r4
  • openssl-provider-fipsAll versions (No fix recorded)
  • openssl-provider-fips-3.1.2All versions (No fix recorded)
Ubuntu4 products
  • edk2All versions (No fix recorded) | < 2022.02-3ubuntu0.22.04.4 | < 2024.02-2ubuntu0.6
  • nodejsAll versions (No fix recorded)
  • openssl< 1.0.2g-1ubuntu4.20+esm10 | < 1.0.2g-1ubuntu4.fips.4.20.10 | All versions (No fix recorded) | < 1.1.1-1ubuntu2.1~18.04.23+esm3 | < 1.1.1-1ubuntu2.fips.2.1~18.04.23.3 | < 1.1.1f-1ubuntu2.20 | < 1.1.1f-1ubuntu2.fips.20 | < 3.0.2-0ubuntu1.12 | < 3.0.2-0ubuntu1.12+Fips1
  • openssl1.0< 1.0.2n-1ubuntu5.13+esm1
Alpine2 products
  • openssl≥ 3.0.0, < 1.1.1v-r0 | ≥ 3.0.0, < 3.0.10-r0 | ≥ 3.0.0, < 3.1.2-r0
  • openssl3< 3.0.11-r0
Debian1 product
  • openssl< 3.0.10-1~deb12u1 | < 3.0.10-1
Openssl1 product
  • opensslEOL≥ 1.1.1, < 1.1.1v | ≥ 1.0.2, < 1.0.2zi | ≥ 3.0.0, < 3.0.10 | ≥ 3.1.0, < 3.1.2 | 1.0.2 | 1.0.2:beta1 | 1.0.2:beta2 | 1.0.2:beta3 | 1.0.2a | 1.0.2b | 1.0.2c | 1.0.2d | 1.0.2e | 1.0.2f | 1.0.2g | 1.0.2h | 1.0.2i | 1.0.2j | 1.0.2k | 1.0.2l | 1.0.2m | 1.0.2n | 1.0.2o | 1.0.2p | 1.0.2q | 1.0.2r | 1.0.2s | 1.0.2t | 1.0.2u | 1.0.2v | 1.0.2w | 1.0.2x | 1.0.2y | 1.0.2za | 1.0.2zb | 1.0.2zc | 1.0.2zd | 1.0.2ze | 1.0.2zf | 1.0.2zg | 1.0.2zh | 1.1.1 | 1.1.1:pre1 | 1.1.1:pre2 | 1.1.1:pre3 | 1.1.1:pre4 | 1.1.1:pre5 | 1.1.1:pre6 | 1.1.1:pre7 | 1.1.1:pre8 | 1.1.1:pre9 | 1.1.1a | 1.1.1b | 1.1.1c | 1.1.1d | 1.1.1e | 1.1.1f | 1.1.1g | 1.1.1h | 1.1.1i | 1.1.1j | 1.1.1k | 1.1.1l | 1.1.1m | 1.1.1n | 1.1.1o | 1.1.1p | 1.1.1q | 1.1.1r | 1.1.1s | 1.1.1t | 1.1.1u
Wolfi1 product
  • openssl< 3.1.1-r4

8 vendors · 59 products

References

45 links
Show all 45 references