Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2023-0286

High

Vulnerable OpenSSL included in cryptography wheels

Published Feb 8, 2023 · Updated Oct 16, 2026 · Also known as ALPINE-CVE-2023-0286, DEBIAN-CVE-2023-0286, EUVD-2023-0817, GHSA-x4qr-2fvf-3mr5, JLSEC-2026-234, PYSEC-2026-800, ROOT-APP-PYPI-CVE-2023-0286, RUSTSEC-2023-0006, SUSE-SU-2023:0482-1, UBUNTU-CVE-2023-0286

Key Facts

Patch immediately
  • CVE-2023-0286 is a high-severity vulnerability (CVSS 7.4 v3.1) affecting OpenSSL, Stormshield Management Center, Stormshield Network Security and 22 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
  • EPSS estimates a 71% probability of exploitation in the next 30 days.
  • Fixed versions are available, including AAVMF 1:1.6.6-1.el7, cloud-hypervisor 30.0-2, compat-openssl10 1:1.0.2o-4.el8_10.1.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v3.1

7.4

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS (30-day exploit likelihood)

71%

Higher than 99.4% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2023-0286 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING.

When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.

Affected Products

653 affected entries in total
ProductAffected versionsFixed in
OpenSSLOpenssl>= 3.0.01.0.2zg
Stormshield Management CenterStormshieldSee advisory3.3.3
Stormshield Network SecurityStormshieldSee advisory2.7.11
openssl1.1-compatalpineSee advisory1.1.1t-r0
openssl3alpineSee advisory3.0.8-r0
20 more affected products in the full CVE brief

Patched Releases

AAVMF

1:1.6.6-1.el7

cloud-hypervisor

30.0-2

compat-openssl10

1:1.0.2o-4.el8_10.1

compat-openssl11

1:1.1.1k-5.el9_4.1, 1:1.1.1k-5.el9_6.1

cryptography

36.0.1+aikido.1, 36.0.1+aikido.2, 36.0.1+aikido.3, 36.0.1+aikido.4, 36.0.1+aikido.5, 36.0.1+aikido.6, 36.0.1+aikido.7, 36.0.1+aikido.8, 36.0.2+aikido.2, 36.0.2+aikido.3, 36.0.2+aikido.4, 36.0.2+aikido.5, 39.0.1, 36.0.1+root.io.1, 36.0.1+root.io.2, 36.0.1+root.io.3, 36.0.1+root.io.4, 36.0.2+root.io.1, 36.0.2+root.io.2

edk2

0:20200602gitca407c7246bf-4.el8_4.3, 0:20221207gitfff6d81270b5-9.el9_2, 2022.02-3ubuntu0.22.04.4, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2, 2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

edk2-aarch64

1:20230821-1.el8, 20200801stable-1.amzn2.0.5, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2, 30:20230821-1.el9

edk2-ovmf

1:20230821-1.el8, 20200801stable-1.amzn2.0.5, 20220126gitbb1bba3d77-4.el8, 20221207gitfff6d81270b5-9.el9_2, 30:20230821-1.el9

edk2-tools

1:20230821-1.el8, 20200801stable-1.amzn2.0.5, 20221207gitfff6d81270b5-9.el9_2, 30:20230821-1.el9

edk2-tools-doc

20200801stable-1.amzn2.0.5, 20221207gitfff6d81270b5-9.el9_2

edk2-tools-python

20200801stable-1.amzn2.0.5

efi-shell-aa64

2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

efi-shell-arm

2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

efi-shell-ia32

2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

efi-shell-loongarch64

2025.02-3ubuntu2.2

efi-shell-riscv64

2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

efi-shell-x64

2024.02-2ubuntu0.6, 2025.02-3ubuntu2.2

hvloader

1.0.1-2, 1.0.1-4

jbcs-httpd24-openssl

1:1.1.1k-14.el7jbcs, 1:1.1.1k-14.el8jbcs

jws5-tomcat-native

0:1.2.31-14.redhat_14.el7jws, 0:1.2.31-14.redhat_14.el8jws, 0:1.2.31-14.redhat_14.el9jws

libopenssl-1_0_0-devel

1.0.2p-150000.3.65.1, 1.0.2p-3.64.1, 1.0.2u-12.1

libopenssl-1_0_0-devel-32bit

1.0.2p-150000.3.65.1, 1.0.2p-3.64.1, 1.0.2u-12.1

libopenssl-1_1-devel

1.1.0i-150100.14.42.1, 1.1.1d-150200.11.57.1, 1.1.1d-2.75.1, 1.1.1l-150400.7.22.1, 1.1.1t-1.1

libopenssl-1_1-devel-32bit

1.1.0i-150100.14.42.1, 1.1.1d-150200.11.57.1, 1.1.1d-2.75.1, 1.1.1l-150400.7.22.1, 1.1.1t-1.1

libopenssl-3-devel

3.0.1-150400.4.17.1, 3.0.8-1.1

Timeline

  1. Publicly disclosed

    Feb 8, 2023

  2. Last updated

    Oct 16, 2026

Weakness Type

  • CWE-704 Incorrect Type Conversion or Cast
  • CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

References

15 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2023-0286 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo