CVE-2023-0464
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.
Published Mar 22, 2023 · updated Oct 14, 2026 · openssl openssl
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the X509_VERIFY_PARAM_set1_policies()' function.
Timeline
Detection, updates, and resolution for this record.
Mar 22, 2023 · NIST NVD
Detected
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy proce
Oct 14, 2026 · NIST NVD
Updated
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy proce
Affected
- cpe openssl/opensslversion unspecified
Sources
- CVE.orgCVE-2023-0464
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-0464
30-day exploitation probability 3.7%
first.org - NIST NVDCVE-2023-0464
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers
nvd.nist.gov