CVE-2023-5363

CVE-2023-5363 is a bug in OpenSSL versions 3.0 and 3.1 affecting the processing of key and initialization vector (IV) lengths during symmetric cipher initialization, specifically impacting RC2, RC4, RC5, CCM, GCM, and OCB modes. This can lead to truncation or overruns of these values, potentially causing a loss of confidentiality in certain cipher modes like CCM, GCM, and OCB due to IV non-uniqueness. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and high confidentiality impact, though the overall severity is assessed as Moderate due to its specific conditions for exploitation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.