Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0216

An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions. The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.

Published

2023-02-08T20:15:24.160

Last Modified

2025-05-05T16:15:25.117

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-476
  • Type: Secondary
    CWE-476
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openssl openssl ≤ 3.0.7 Yes
Application stormshield stormshield_management_center < 3.3.3 Yes
References