CVE-2023-0286

60

FAUCET Score

CVE-2023-0286 is a high-severity type confusion vulnerability in OpenSSL's X.400 address processing within X.509 GeneralNames, affecting various OpenSSL and Stormshield products. This flaw allows an attacker to pass arbitrary pointers to a memcmp call when CRL checking is enabled, potentially leading to memory content disclosure or denial of service. The attack requires high complexity due to the need for specific certificate chain and CRL conditions, but its potential impact on confidentiality and availability is high. While not currently listed on CISA's KEV catalog, the vulnerability has garnered significant community discussion and media coverage, though no public exploit code or Metasploit/Nuclei modules are currently available.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 1.0.2, < 1.0.2zgCPE matchmatch criteria	cpe:2.3:a:openssl:openssl::::::::
		>= 1.1.1, < 1.1.1tCPE matchmatch criteria	cpe:2.3:a:openssl:openssl::::::::
		>= 3.0.0, < 3.0.8CPE matchmatch criteria	cpe:2.3:a:openssl:openssl::::::::
		< 3.3.3CPE matchmatch criteria	cpe:2.3:a:stormshield:stormshield_management_center::::::::
		>= 2.7.0, < 2.7.11CPE matchmatch criteria	cpe:2.3:a:stormshield:stormshield_network_security::::::::

CVSS Data

CVSS version used by this source: 3.1

7.4HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

2.2

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

59.50%

Probability of exploitation in next 30 days

EPSS Percentile

99.0%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.5950 is in the 99th percentile among its peer group of 8,914 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (74)

bitdefenderpatch availablevia llm_extracted

Fixed in: ['6.1.1']

bitdefenderpatch availablevia llm_extracted

Fixed in: ['9.0.2303.100']

githubpatch availablevia llm_extracted

microsoftpatch availablevia msrc

Product: 20011-17086Fixed in: 1.0.1-3

microsoftpatch availablevia msrc

Product: azl3 edk2 20230301gitf80f052277c8-37 on Azure Linux 3.0Fixed in: 20240223gitedc6681206c1-1

microsoftpatch availablevia msrc

Product: cm1 rust 1.59.0-1 on CBL Mariner 1.0Fixed in: 1.59.0-1

microsoftpatch availablevia msrc

Product: cm1 cloud-hypervisor 22.0-2 on CBL Mariner 1.0Fixed in: 22.0-2

microsoftpatch availablevia msrc

Product: cm1 openssl 1.1.1k-13 on CBL Mariner 1.0Fixed in: -

microsoftpatch availablevia msrc

Product: cbl2 rust 1.68.2-5 on CBL Mariner 2.0Fixed in: 1.68.2-5

microsoftpatch availablevia msrc

Product: cbl2 reaper 3.1.1-6 on CBL Mariner 2.0Fixed in: 3.1.1-6

microsoftpatch availablevia msrc

Product: cbl2 cloud-hypervisor 30.0-2 on CBL Mariner 2.0Fixed in: 30.0-2

microsoftpatch availablevia msrc

Product: 17945-16823Fixed in: 1.1.1k-21

microsoftpatch availablevia msrc

Product: azl3 hvloader 1.0.1-4 on Azure Linux 3.0Fixed in: 1.0.1-4

microsoftpatch availablevia msrc

Product: azl3 hvloader 1.0.1-2 on Azure Linux 3.0Fixed in: 1.0.1-4

microsoftpatch availablevia msrc

Product: cbl2 hvloader 1.0.1-2 on CBL Mariner 2.0Fixed in: 1.0.1-3

microsoftpatch availablevia msrc

Product: 17859-17084Fixed in: 20240223gitedc6681206c1-1

microsoftpatch availablevia msrc

Product: 17941-16820Fixed in: 1.59.0-1

microsoftpatch availablevia msrc

Product: 17918-16820Fixed in: 22.0-2

microsoftpatch availablevia msrc

Product: 17942-16820Fixed in: -

microsoftpatch availablevia msrc

Product: 17944-16823Fixed in: 1.68.2-5

microsoftpatch availablevia msrc

Product: 16940-16823Fixed in: 3.1.1-6

microsoftpatch availablevia msrc

Product: 17919-16823Fixed in: 30.0-2

microsoftpatch availablevia msrc

Product: cbl2 openssl 1.1.1k-21 on CBL Mariner 2.0Fixed in: 1.1.1k-21

microsoftpatch availablevia msrc

Product: 17946-17084Fixed in: 1.0.1-4

microsoftpatch availablevia msrc

Product: 18666-17084Fixed in: 1.0.1-4

pippatch availablevia ghsa

Product: cryptographyFixed in: 39.0.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: compat-openssl11-1:1.1.1k-5.el9_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: edk2-0:20220126gitbb1bba3d77-3.el9_0.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: compat-openssl11-1:1.1.1k-5.el9_4.1

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 5Fixed in: openssl

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 5.7 on RHEL 7Fixed in: jws5-tomcat-native-0:1.2.31-14.redhat_14.el7jws

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 5.7 on RHEL 8Fixed in: jws5-tomcat-native-0:1.2.31-14.redhat_14.el8jws

redhatpatch availablevia redhat_api

Product: Red Hat JBoss Web Server 5.7 on RHEL 9Fixed in: jws5-tomcat-native-0:1.2.31-14.redhat_14.el9jws

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 8Fixed in: redhat-virtualization-host-0:4.5.3-202309130206_8.6

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/cluster-logging-operator-bundle:v5.9.6-22

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/cluster-logging-rhel9-operator:v5.9.6-11

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/eventrouter-rhel9:v0.4.0-290

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/fluentd-rhel9:v5.9.6-4

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/log-file-metric-exporter-rhel9:v1.1.0-270

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/logging-loki-rhel9:v3.1.0-18

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/loki-operator-bundle:v5.9.6-15

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/loki-rhel9-operator:v5.9.6-5

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/lokistack-gateway-rhel9:v0.1.0-639

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/opa-openshift-rhel9:v0.1.0-277

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/vector-rhel9:v0.34.1-16

redhatpatch availablevia redhat_api

Product: RHOL-5.9-RHEL-9Fixed in: openshift-logging/logging-view-plugin-rhel9:v5.9.6-3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Extended Update SupportFixed in: openssl-1:3.0.1-46.el9_0

redhatpatch availablevia redhat_api

Product: JBCS httpd 2.4.51.sp2Fixed in: openssl

redhatpatch availablevia redhat_api

Product: JBoss Core Services for RHEL 8Fixed in: jbcs-httpd24-openssl-1:1.1.1k-14.el8jbcs

redhatpatch availablevia redhat_api

Product: JBoss Core Services on RHEL 7Fixed in: jbcs-httpd24-openssl-1:1.1.1k-14.el7jbcs

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6 Extended Lifecycle SupportFixed in: openssl-0:1.0.1e-61.el6_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: openssl-1:1.0.2k-26.el7_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: openssl-1:1.0.2k-21.el7_7.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: edk2-0:20220126gitbb1bba3d77-4.el8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: compat-openssl10-1:1.0.2o-4.el8_10.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: openssl-1:1.1.1k-9.el8_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.1 Update Services for SAP SolutionsFixed in: openssl-1:1.1.1c-6.el8_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: edk2-0:20190829git37eef91017ad-9.el8_2.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: openssl-1:1.1.1c-21.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: edk2-0:20190829git37eef91017ad-9.el8_2.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceFixed in: openssl-1:1.1.1c-21.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: edk2-0:20190829git37eef91017ad-9.el8_2.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsFixed in: openssl-1:1.1.1c-21.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: edk2-0:20200602gitca407c7246bf-4.el8_4.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update SupportFixed in: openssl-1:1.1.1g-18.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: edk2-0:20200602gitca407c7246bf-4.el8_4.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: edk2-0:20200602gitca407c7246bf-4.el8_4.3

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: edk2-0:20220126gitbb1bba3d77-2.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Extended Update SupportFixed in: openssl-1:1.1.1k-8.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: openssl-1:3.0.1-47.el9_1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: edk2-0:20221207gitfff6d81270b5-9.el9_2

rustpatch availablevia ghsa

Product: openssl-srcFixed in: 300.0.12

rustpatch availablevia ghsa

Product: openssl-srcFixed in: 111.25.0

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: ovmf

Vendor Advisories (6)

bitdefenderllm-bitdefender-b8f74bfb6f96c875

Splunk SOAR Cryptography Python Package Upgrade Incompatibility

githubllm-github-3ba686eaed274212HIGH

AS-2023-002: OpenSSL

bitdefenderllm-bitdefender-b23af70584e80d8cHIGH

June Third Party Package Updates in Splunk Cloud

microsoft2023-Feb/CVE-2023-0286Important

X.400 address type confusion in X.509 GeneralName

pipGHSA-x4qr-2fvf-3mr5high

Vulnerable OpenSSL included in cryptography wheels

redhatCVE-2023-0286Important

openssl: X.400 address type confusion in X.509 GeneralName

References

psirt.global.sonicwall.com / vuln-detail/SNWLID-2023-0003

ftp.openbsd.org / pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt

Third Party Advisory

ftp.openbsd.org / pub/OpenBSD/patches/7.2/common/018_x509.patch.sig

Third Party Advisory

git.openssl.org / gitweb

PatchVendor Advisory

git.openssl.org / gitweb

PatchVendor Advisory

git.openssl.org / gitweb

PatchVendor Advisory

security.gentoo.org / glsa/202402-08

openssl.org / news/secadv/20230207.txt

Vendor Advisory