CVE-2023-5678

CVE-2023-5678 is a Denial of Service vulnerability affecting OpenSSL versions when generating or checking excessively long X9.42 DH keys or parameters. Specifically, functions like DH_generate_key() and DH_check_pub_key() can experience significant delays if supplied with untrusted, large parameters. The vulnerability has a CVSS score of 5.3 MEDIUM, indicating a network-based attack with low complexity, requiring no user interaction, and resulting in low availability impact. The OpenSSL SSL/TLS implementation and FIPS providers are not affected. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing. However, there is some community discussion and media coverage, suggesting awareness of the issue.