FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenSSL -- Denial of Service vulnerability

Affected packages
openssl < 3.0.13_4,1
openssl31 < 3.1.5_4
openssl32 < 3.2.1_4
openssl33 < 3.3.0_1
openssl-quictls < 3.0.13_4
openssl31-quictls < 3.1.5_4

Details

VuXML ID b88aa380-1442-11ef-a490-84a93843eb75
Discovery 2024-05-16
Entry 2024-05-17

The OpenSSL project reports:

Excessive time spent checking DSA keys and parameters (Low)

Checking excessively long DSA keys or parameters may be very slow.

References

CVE Name CVE-2024-4603
URL https://www.openssl.org/news/secadv/20240516.txt