OpenSSL Multiple Vulnerabilities

Release Date: 2 Nov 2022 4829 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in OpenSSL. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

Impact

Denial of Service
Remote Code Execution

System / Technologies affected

OpenSSL versions 3.0.0 to 3.0.6

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to:

Version 3.0.7

Since OpenSSL is distributed as source code in various products, users are recommended to review if the products in-use are related to the vulerabilities via vendors' website and update accordingly.

Vulnerability Identifier

Source

openSSL