MGASA-2023-0273
Advisory lineage Upstream: 3 Downstream: 0
Published: 30 Sept 2023, 19:15
Last modified:30 May 2026, 05:15
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
30 Sept 2023, 19:15
Published
Vulnerability first disclosed
30 May 2026, 05:15
Last Modified
Vulnerability information updated
Description
Updated quictls packages fix security vulnerabilities The updated packages fix security vulnerabilities: AES-SIV implementation ignores empty associated data entries. (CVE-2023-2975) Excessive time spent checking DH keys and parameters. (CVE-2023-3446) Excessive time spent checking DH q parameter value. (CVE-2023-3817)
Affected Systems
- mageia•quictls
< 3.0.10-1.mga9
References (11)
- https://advisories.mageia.org/MGASA-2023-0273.html
- https://bugs.mageia.org/show_bug.cgi?id=32248
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2975
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817
- https://www.openssl.org/news/secadv/20230714.txt
- https://www.openssl.org/news/secadv/20230719.txt
- https://www.openssl.org/news/secadv/20230731.txt
- https://www.cve.org/CVERecord?id=CVE-2023-2975
- https://www.cve.org/CVERecord?id=CVE-2023-3446
- https://www.cve.org/CVERecord?id=CVE-2023-3817