ZeroDay Findings
Sign inSign up

Findings

CVE-2023-0464

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.

Published Mar 22, 2023 · updated Oct 14, 2026 · openssl openssl

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the X509_VERIFY_PARAM_set1_policies()' function.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 22, 2023 · NIST NVD

    Detected

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy proce

  2. Oct 14, 2026 · NIST NVD

    Updated

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy proce

Affected

  • cpe openssl/opensslversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2023-0464

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2023-0464

    30-day exploitation probability 4.0%

    first.org
  • NIST NVDVulnerability recordCVE-2023-0464

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers

    nvd.nist.gov

References