{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-14T18:50:10.495","vulnerabilities":[{"cve":{"id":"CVE-2023-6237","sourceIdentifier":"openssl-security@openssl.org","published":"2024-04-25T07:15:45.270","lastModified":"2024-11-21T08:43:25.997","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Issue summary: Checking excessively long invalid RSA public keys may take\na long time.\n\nImpact summary: Applications that use the function EVP_PKEY_public_check()\nto check RSA public keys may experience long delays. Where the key that\nis being checked has been obtained from an untrusted source this may lead\nto a Denial of Service.\n\nWhen function EVP_PKEY_public_check() is called on RSA public keys,\na computation is done to confirm that the RSA modulus, n, is composite.\nFor valid RSA keys, n is a product of two or more large primes and this\ncomputation completes quickly. However, if n is an overly large prime,\nthen this computation would take a long time.\n\nAn application that calls EVP_PKEY_public_check() and supplies an RSA key\nobtained from an untrusted source could be vulnerable to a Denial of Service\nattack.\n\nThe function EVP_PKEY_public_check() is not called from other OpenSSL\nfunctions however it is called from the OpenSSL pkey command line\napplication. For that reason that application is also vulnerable if used\nwith the '-pubin' and '-check' options on untrusted data.\n\nThe OpenSSL SSL\/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue."},{"lang":"es","value":"Resumen del problema: la comprobación de claves públicas RSA inválidas excesivamente largas puede llevar mucho tiempo. Resumen de impacto: las aplicaciones que utilizan la función EVP_PKEY_public_check() para comprobar las claves públicas RSA pueden experimentar grandes retrasos. Cuando la clave que se está verificando se obtuvo de una fuente que no es confiable, esto puede dar lugar a una denegación de servicio. Cuando se llama a la función EVP_PKEY_public_check() en claves públicas RSA, se realiza un cálculo para confirmar que el módulo RSA, n, es compuesto. Para claves RSA válidas, n es un producto de dos o más números primos grandes y este cálculo se completa rápidamente. Sin embargo, si n es un número primo demasiado grande, entonces este cálculo llevaría mucho tiempo. Una aplicación que llama a EVP_PKEY_public_check() y proporciona una clave RSA obtenida de una fuente que no es de confianza podría ser vulnerable a un ataque de denegación de servicio. La función EVP_PKEY_public_check() no se llama desde otras funciones de OpenSSL, sin embargo, se llama desde la aplicación de línea de comandos pkey de OpenSSL. Por esa razón, esa aplicación también es vulnerable si se usa con las opciones '-pubin' y '-check' en datos que no son de confianza. La implementación de OpenSSL SSL\/TLS no se ve afectada por este problema. Los proveedores FIPS OpenSSL 3.0 y 3.1 se ven afectados por este problema."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1\/AV:N\/AC:H\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:H","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":3.6}]},"weaknesses":[{"source":"openssl-security@openssl.org","type":"Secondary","description":[{"lang":"en","value":"CWE-606"}]}],"references":[{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","source":"openssl-security@openssl.org"},{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/18c02492138d1eb8b6548cb26e7b625fb2414a2a","source":"openssl-security@openssl.org"},{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/a830f551557d3d66a84bbb18a5b889c640c36294","source":"openssl-security@openssl.org"},{"url":"https:\/\/www.openssl.org\/news\/secadv\/20240115.txt","source":"openssl-security@openssl.org"},{"url":"http:\/\/www.openwall.com\/lists\/oss-security\/2024\/03\/11\/1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/0b0f7abfb37350794a4b8960fafc292cd5d1b84d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/18c02492138d1eb8b6548cb26e7b625fb2414a2a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https:\/\/github.com\/openssl\/openssl\/commit\/a830f551557d3d66a84bbb18a5b889c640c36294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https:\/\/security.netapp.com\/advisory\/ntap-20240531-0007\/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https:\/\/www.openssl.org\/news\/secadv\/20240115.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}