Excessive time spent checking DSA keys and parameters
Published May 16, 2024
5.3
MEDIUMCVSS 3.1
EPSS 1.13%
Description
Issue summary: Checking excessively long DSA keys or parameters may be very slow.
Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service.
The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform various checks on DSA parameters. Some of those computations take a long time if the modulus (`p` parameter) is too large.
Trying to use a very large modulus is slow and OpenSSL will not allow using public keys with a modulus which is over 10,000 bits in length for signature verification. However the key and parameter check functions do not limit the modulus size when performing the checks.
An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack.
These functions are not called by OpenSSL itself on untrusted DSA keys so only applications that directly call these functions may be vulnerable.
Also vulnerable are the OpenSSL pkey and pkeyparam command line applications when using the `-check` option.
The OpenSSL SSL/TLS implementation is not affected by this issue.
The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.
Affected products
-
- Version 3.0.0StatusaffectedConstraints<3.0.14
- Version 3.1.0StatusaffectedConstraints<3.1.6
- Version 3.2.0StatusaffectedConstraints<3.2.2
- Version 3.3.0StatusaffectedConstraints<3.3.1
- Version
No data.
-
- Version 3.0.0StatusaffectedConstraints<3.0.14
- Version 3.1.0StatusaffectedConstraints<3.1.6
- Version 3.2.0StatusaffectedConstraints<3.2.2
- Version 3.3.0StatusaffectedConstraints<3.3.1
- Version
Red Hat Enterprise Linux 9
openssl-1:3.2.2-6.el9_5
Fixed · RHSA-2024:9333
Red Hat Enterprise Linux 9
openssl-1:3.2.2-6.el9_5
Fixed · RHSA-2024:9333
Logging Subsystem for Red Hat OpenShift
openshift-logging/fluentd-rhel9
Fix deferred
Red Hat 3scale API Management Platform 2
3scale-amp-backend-container
Fix deferred
Red Hat Enterprise Linux 10
edk2
Not affected
Red Hat Enterprise Linux 10
openssl
Affected
Red Hat Enterprise Linux 10
shim
Not affected
Red Hat Enterprise Linux 6
openssl
Out of support scope
Red Hat Enterprise Linux 7
openssl
Not affected
Red Hat Enterprise Linux 7
ovmf
Not affected
Red Hat Enterprise Linux 8
compat-openssl10
Not affected
Red Hat Enterprise Linux 8
edk2
Not affected
Red Hat Enterprise Linux 8
mingw-openssl
Not affected
Red Hat Enterprise Linux 8
openssl
Not affected
Red Hat Enterprise Linux 8
shim
Not affected
Red Hat Enterprise Linux 8
shim-unsigned-x64
Not affected
Red Hat Enterprise Linux 9
compat-openssl11
Not affected
Red Hat Enterprise Linux 9
edk2
Not affected
Red Hat Enterprise Linux 9
shim
Not affected
Red Hat Enterprise Linux 9
shim-unsigned-aarch64
Not affected
Red Hat Enterprise Linux 9
shim-unsigned-x64
Not affected
Red Hat JBoss Core Services
openssl
Not affected
Red Hat JBoss Web Server 5
openssl
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 9 | openssl-1:3.2.2-6.el9_5 | Fixed | RHSA-2024:9333 |
| Red Hat Enterprise Linux 9 | openssl-1:3.2.2-6.el9_5 | Fixed | RHSA-2024:9333 |
| Logging Subsystem for Red Hat OpenShift | openshift-logging/fluentd-rhel9 | Fix deferred | n/a |
| Red Hat 3scale API Management Platform 2 | 3scale-amp-backend-container | Fix deferred | n/a |
| Red Hat Enterprise Linux 10 | edk2 | Not affected | n/a |
| Red Hat Enterprise Linux 10 | openssl | Affected | n/a |
| Red Hat Enterprise Linux 10 | shim | Not affected | n/a |
| Red Hat Enterprise Linux 6 | openssl | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | openssl | Not affected | n/a |
| Red Hat Enterprise Linux 7 | ovmf | Not affected | n/a |
| Red Hat Enterprise Linux 8 | compat-openssl10 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | edk2 | Not affected | n/a |
| Red Hat Enterprise Linux 8 | mingw-openssl | Not affected | n/a |
| Red Hat Enterprise Linux 8 | openssl | Not affected | n/a |
| Red Hat Enterprise Linux 8 | shim | Not affected | n/a |
| Red Hat Enterprise Linux 8 | shim-unsigned-x64 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | compat-openssl11 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | edk2 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | shim | Not affected | n/a |
| Red Hat Enterprise Linux 9 | shim-unsigned-aarch64 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | shim-unsigned-x64 | Not affected | n/a |
| Red Hat JBoss Core Services | openssl | Not affected | n/a |
| Red Hat JBoss Web Server 5 | openssl | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Only OpenSSL 3.3, 3.2, 3.1 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.
References (12)
- http://www.openwall.com/lists/oss-security/2024/05/16/2
- https://access.redhat.com/security/cve/CVE-2024-4603 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2281029 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-44212 Advisory
- https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397 patch
- https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e patch
- https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d patch
- https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740 patch
- https://nvd.nist.gov/vuln/detail/CVE-2024-4603
- https://security.netapp.com/advisory/ntap-20240621-0001/
- https://www.cve.org/CVERecord?id=CVE-2024-4603
- https://www.openssl.org/news/secadv/20240516.txt vendor-advisory
Change history (0)
No recorded changes yet.