V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsDocs
←Back to catalog
BDU:2024-02846
BDU
Medium

Уязвимость реализации алгоритма POLY1305 MAC криптографической библиотеки OpenSSL вызвана переполнением буфера в куче. Эксплуатация уязвимо…

CVSS
6.5
Medium
EPSS
0.00
p0
Published
2024-01-01
Updated
2024-01-01
Description

Уязвимость реализации алгоритма POLY1305 MAC криптографической библиотеки OpenSSL вызвана переполнением буфера в куче. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании в результате восстановления содержимого векторных регистров в ином порядке на процессорах PowerPC, поддерживающих инструкции PowerISA 2.07

Tags · CWE
Pre-auth
Affected products
Openssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation OpensslOpenssl software foundation Openssl
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Timeline
2024-01-01
Published
2024-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: H
High (H)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: L
Low (L)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected software
ProductVendorStatus
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
opensslopenssl software foundationTracked
Source databases
BDU
Related vulnerabilities
CVE-2023-6129