CVE-2023-5678 is a medium-severity vulnerability that affects certain versions of OpenSSL. It involves generating or checking excessively long X9.42 DH keys or parameters, which can result in slow performance and potentially lead to a Denial of Service (DoS) attack. Systems using the impacted versions of OpenSSL are vulnerable to this issue, making it crucial for users to update their software to a secure version.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, you'll need to check the version of OpenSSL you're using. The affected versions are as follows:

• 1.0.2 up to (excluding) 1.0.2zj

• 1.1.1 up to (excluding) 1.1.1x

• 3.0.0 up to (excluding) 3.0.13

• 3.1.0 up to (excluding) 3.1.5

If your OpenSSL version falls within these ranges, your system may be vulnerable to this issue, which involves generating or checking excessively long X9.42 DH keys or parameters, potentially leading to slow performance and denial of service attacks.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to update your OpenSSL software to a secure version. To do this, follow these simple steps:

1. Identify your current OpenSSL version.

2. Check if it falls within the affected version ranges.

3. Update to a secure version (1.0.2zj, 1.1.1x, 3.0.13, or 3.1.5).

By updating your OpenSSL software, you'll protect your system from potential slow performance and denial of service attacks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The vulnerability, also known as the Excessively long X9.42 DH keys or parameters issue, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was added to the NVD on November 6, 2023. There is no specific due date or required action mentioned, but it is recommended to update the affected software versions and follow any advisories or solutions provided by the vendor.

Weakness enumeration

The CVE-2023-5678 vulnerability is related to the weakness enumeration CWE-754, which involves improper checks for unusual or exceptional conditions, such as excessively long X9.42 DH keys or parameters.

For more details

CVE-2023-5678 is a medium-severity vulnerability that affects certain versions of OpenSSL, potentially leading to slow performance and denial of service attacks. After analyzing the NVD page and related resources, it's clear that updating to a secure version of OpenSSL is crucial for mitigating this vulnerability. For more information about the vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Git Commit with Patch

• Git Commit with DH Key Check

• Vendor Advisory