{"id":"CVE-2023-3817","summary":"Excessive time spent checking DH q parameter value","details":"Issue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.","modified":"2026-11-11T10:46:18.836629516Z","published":"2023-07-31T15:34:13.627Z","related":["ALSA-2023:7877","ALSA-2024:2447","SUSE-SU-2023:3239-1","SUSE-SU-2023:3242-1","SUSE-SU-2023:3243-1","SUSE-SU-2023:3244-1","SUSE-SU-2023:3244-2","SUSE-SU-2023:3291-1","SUSE-SU-2023:3291-2","SUSE-SU-2023:3308-1","SUSE-SU-2023:3338-1","SUSE-SU-2023:3339-1","SUSE-SU-2023:3397-1","SUSE-SU-2023:3958-1","SUSE-SU-2023:4189-1","SUSE-SU-2023:4190-1","openSUSE-SU-2024:13090-1","openSUSE-SU-2024:13097-1","openSUSE-SU-2024:13111-1"],"database_specific":{"cwe_ids":["CWE-606"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3817.json","unresolved_ranges":[{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"3.1.0"},{"fixed":"3.1.2"},{"introduced":"3.0.0"},{"fixed":"3.0.10"},{"introduced":"1.1.1"},{"fixed":"1.1.1v"},{"introduced":"1.0.2"},{"fixed":"1.0.2zi"}],"source":"AFFECTED_FIELD"}]}],"cna_assigner":"openssl"},"references":[{"type":"WEB","url":"http://seclists.org/fulldisclosure/2023/Jul/43"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/07/31/1"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/09/22/11"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/09/22/9"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2023/11/06/2"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-099606.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-915275.html"},{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-943925.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00019.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3817.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202402-08"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230818-0014/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20231027-0008/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20230731.txt"},{"type":"FIX","url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5"},{"type":"FIX","url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644"},{"type":"FIX","url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f"},{"type":"FIX","url":"https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/alsyundawy/openssl-1.0.2","events":[{"introduced":"c46078156d49453ba69badc9addb1e2dcd1c71f5"},{"last_affected":"c46078156d49453ba69badc9addb1e2dcd1c71f5"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2:-:*:*:*:*:*:*","range":[{"introduced":"1.0.2-NA"},{"last_affected":"1.0.2-NA"}]},{"range":[{"introduced":"1.0.2a"},{"last_affected":"1.0.2a"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2b"},{"last_affected":"1.0.2b"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2c"},{"last_affected":"1.0.2c"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2d"},{"last_affected":"1.0.2d"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2e"},{"last_affected":"1.0.2e"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2f"},{"last_affected":"1.0.2f"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2g"},{"last_affected":"1.0.2g"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2h"},{"last_affected":"1.0.2h"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2i"},{"last_affected":"1.0.2i"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2j"},{"last_affected":"1.0.2j"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2k"},{"last_affected":"1.0.2k"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2l"},{"last_affected":"1.0.2l"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2m"},{"last_affected":"1.0.2m"}]},{"range":[{"introduced":"1.0.2n"},{"last_affected":"1.0.2n"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2n:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2o"},{"last_affected":"1.0.2o"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2o:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2p"},{"last_affected":"1.0.2p"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2p:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2q:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2q"},{"last_affected":"1.0.2q"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2r:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2r"},{"last_affected":"1.0.2r"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2s:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2s"},{"last_affected":"1.0.2s"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2t:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2t"},{"last_affected":"1.0.2t"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2u"},{"last_affected":"1.0.2u"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2u:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2v:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2v"},{"last_affected":"1.0.2v"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2w:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2w"},{"last_affected":"1.0.2w"}]},{"range":[{"introduced":"1.0.2x"},{"last_affected":"1.0.2x"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2x:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2y"},{"last_affected":"1.0.2y"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2y:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2za:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2za"},{"last_affected":"1.0.2za"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2zb:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zb"},{"last_affected":"1.0.2zb"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2zc"},{"last_affected":"1.0.2zc"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zc:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2zd"},{"last_affected":"1.0.2zd"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zd:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2ze:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2ze"},{"last_affected":"1.0.2ze"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zf:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zf"},{"last_affected":"1.0.2zf"}]},{"range":[{"introduced":"1.0.2zg"},{"last_affected":"1.0.2zg"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zg:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2zh:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zh"},{"last_affected":"1.0.2zh"}],"source":"CPE_STRING"}]}}],"versions":["1.0.2-NA","1.0.2zs-u20260929-rev1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3817.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kzalewski/openssl-1.1.1","events":[{"introduced":"9ad69b994ae7c73ba06d9f75efd2625102de814c"},{"last_affected":"56afc316737b1892ed331bbae2a28a04a09e58dc"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*","range":[{"introduced":"1.1.1-NA"},{"last_affected":"1.1.1-NA"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.1.1a"},{"last_affected":"1.1.1a"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1a:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1b"},{"last_affected":"1.1.1b"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1b:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1c:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1c"},{"last_affected":"1.1.1c"}]},{"range":[{"introduced":"1.1.1d"},{"last_affected":"1.1.1d"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1d:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1e"},{"last_affected":"1.1.1e"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1e:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1f"},{"last_affected":"1.1.1f"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1g"},{"last_affected":"1.1.1g"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1g:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1h:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1h"},{"last_affected":"1.1.1h"}]},{"range":[{"introduced":"1.1.1i"},{"last_affected":"1.1.1i"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1i:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1j:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1j"},{"last_affected":"1.1.1j"}]},{"range":[{"introduced":"1.1.1k"},{"last_affected":"1.1.1k"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1l:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1l"},{"last_affected":"1.1.1l"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1m:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1m"},{"last_affected":"1.1.1m"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1n:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1n"},{"last_affected":"1.1.1n"}]},{"range":[{"introduced":"1.1.1o"},{"last_affected":"1.1.1o"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1o:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1p:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1p"},{"last_affected":"1.1.1p"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1q:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1q"},{"last_affected":"1.1.1q"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1r:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1r"},{"last_affected":"1.1.1r"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1s:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1s"},{"last_affected":"1.1.1s"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1t:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1t"},{"last_affected":"1.1.1t"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1u:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1u"},{"last_affected":"1.1.1u"}]},{"range":[{"introduced":"1.1.1-pre1"},{"last_affected":"1.1.1-pre1"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre1:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre2:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre2"},{"last_affected":"1.1.1-pre2"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre3:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre3"},{"last_affected":"1.1.1-pre3"}],"source":"CPE_STRING"}]}}],"versions":["1.1.1-NA","1.1.1-pre1","1.1.1-pre2","1.1.1-pre3","1.1.1zb_p3","1.1.1zb_p2","1.1.1zb_p1","1.1.1zb"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3817.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"89cd17a031e022211684eb7eb41190cf1910f9fa"},{"fixed":"245cb0291e0db99d9ccf3692fa76f440b2b054c2"},{"introduced":"a92271e03a8d0dee507b6f1e7f49512568b2c7ad"},{"fixed":"17a2c5111864d8e016c5f2d29c40a3746b559e9d"},{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"last_affected":"bb20b3fd507b635607eddd895dbcad08e0ed8793"}],"database_specific":{"extracted_events":[{"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.0.0"},{"fixed":"3.0.10"}]},{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"3.1.0"},{"fixed":"3.1.2"}],"source":"CPE_RANGE"},{"range":[{"introduced":"1.0.2-NA"},{"last_affected":"1.0.2-NA"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2:-:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2a:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2a"},{"last_affected":"1.0.2a"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2b"},{"last_affected":"1.0.2b"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2b:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2c:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2c"},{"last_affected":"1.0.2c"}]},{"range":[{"introduced":"1.0.2d"},{"last_affected":"1.0.2d"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2d:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2e"},{"last_affected":"1.0.2e"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2e:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2f"},{"last_affected":"1.0.2f"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2f:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.0.2g"},{"last_affected":"1.0.2g"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2g:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2h:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2h"},{"last_affected":"1.0.2h"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2i:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2i"},{"last_affected":"1.0.2i"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2j:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2j"},{"last_affected":"1.0.2j"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2k"},{"last_affected":"1.0.2k"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2k:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2l:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2l"},{"last_affected":"1.0.2l"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2m:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2m"},{"last_affected":"1.0.2m"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2n:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2n"},{"last_affected":"1.0.2n"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2o"},{"last_affected":"1.0.2o"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2o:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2p:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2p"},{"last_affected":"1.0.2p"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2q:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2q"},{"last_affected":"1.0.2q"}]},{"range":[{"introduced":"1.0.2r"},{"last_affected":"1.0.2r"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2r:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2s:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2s"},{"last_affected":"1.0.2s"}]},{"range":[{"introduced":"1.0.2t"},{"last_affected":"1.0.2t"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2t:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2u:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2u"},{"last_affected":"1.0.2u"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2v:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2v"},{"last_affected":"1.0.2v"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2w:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2w"},{"last_affected":"1.0.2w"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2x:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2x"},{"last_affected":"1.0.2x"}]},{"range":[{"introduced":"1.0.2y"},{"last_affected":"1.0.2y"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2y:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2za:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2za"},{"last_affected":"1.0.2za"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2zb"},{"last_affected":"1.0.2zb"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zb:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zc:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zc"},{"last_affected":"1.0.2zc"}]},{"range":[{"introduced":"1.0.2zd"},{"last_affected":"1.0.2zd"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zd:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2ze:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2ze"},{"last_affected":"1.0.2ze"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2zf:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zf"},{"last_affected":"1.0.2zf"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2zg"},{"last_affected":"1.0.2zg"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2zg:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2zh:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2zh"},{"last_affected":"1.0.2zh"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2:beta1:*:*:*:*:*:*","range":[{"introduced":"1.0.2-beta1"},{"last_affected":"1.0.2-beta1"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.0.2-beta2"},{"last_affected":"1.0.2-beta2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.0.2:beta2:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.0.2:beta3:*:*:*:*:*:*","range":[{"introduced":"1.0.2-beta3"},{"last_affected":"1.0.2-beta3"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:-:*:*:*:*:*:*","range":[{"introduced":"1.1.1-NA"},{"last_affected":"1.1.1-NA"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1a:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1a"},{"last_affected":"1.1.1a"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.1.1b"},{"last_affected":"1.1.1b"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1b:*:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1c"},{"last_affected":"1.1.1c"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1c:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1d:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1d"},{"last_affected":"1.1.1d"}]},{"range":[{"introduced":"1.1.1e"},{"last_affected":"1.1.1e"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1e:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1f:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1f"},{"last_affected":"1.1.1f"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.1.1g"},{"last_affected":"1.1.1g"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1g:*:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1h:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1h"},{"last_affected":"1.1.1h"}],"source":"CPE_STRING"},{"range":[{"introduced":"1.1.1i"},{"last_affected":"1.1.1i"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1i:*:*:*:*:*:*:*"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1j:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1j"},{"last_affected":"1.1.1j"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1k:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1k"},{"last_affected":"1.1.1k"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1l:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1l"},{"last_affected":"1.1.1l"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1m:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1m"},{"last_affected":"1.1.1m"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1n:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1n"},{"last_affected":"1.1.1n"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1o:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1o"},{"last_affected":"1.1.1o"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1p:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1p"},{"last_affected":"1.1.1p"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1q:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1q"},{"last_affected":"1.1.1q"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1r:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1r"},{"last_affected":"1.1.1r"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1s:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1s"},{"last_affected":"1.1.1s"}],"source":"CPE_STRING"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1t:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1t"},{"last_affected":"1.1.1t"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1u:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1u"},{"last_affected":"1.1.1u"}]},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre1:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre1"},{"last_affected":"1.1.1-pre1"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre2:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre2"},{"last_affected":"1.1.1-pre2"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre3:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre3"},{"last_affected":"1.1.1-pre3"}]},{"range":[{"introduced":"1.1.1-pre4"},{"last_affected":"1.1.1-pre4"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre4:*:*:*:*:*:*"},{"range":[{"introduced":"1.1.1-pre5"},{"last_affected":"1.1.1-pre5"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre5:*:*:*:*:*:*"},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre6:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre6"},{"last_affected":"1.1.1-pre6"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre7:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre7"},{"last_affected":"1.1.1-pre7"}]},{"cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre8:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre8"},{"last_affected":"1.1.1-pre8"}],"source":"CPE_STRING"},{"source":"CPE_STRING","cpe":"cpe:2.3:a:openssl:openssl:1.1.1:pre9:*:*:*:*:*:*","range":[{"introduced":"1.1.1-pre9"},{"last_affected":"1.1.1-pre9"}]}]}}],"versions":["1.0.2-NA","1.0.2-beta1","1.0.2-beta2","1.0.2-beta3","1.1.1-NA","1.1.1-pre1","1.1.1-pre2","1.1.1-pre3","1.1.1-pre4","1.1.1-pre5","1.1.1-pre6","1.1.1-pre7","1.1.1-pre8","1.1.1-pre9","openssl-3.0.9","openssl-3.1.1","openssl-3.1.0","openssl-3.0.8","openssl-3.0.7","openssl-3.0.6","openssl-3.0.5","openssl-3.0.4","openssl-3.0.3","openssl-3.0.2","openssl-3.0.1","openssl-3.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-3817.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}