{"id":"CVE-2022-3996","published":"2022-12-13T15:43:06Z","modified":"2024-08-03T01:27:54Z","title":"X.509 Policy Constraints Double Locking","vendor":"OpenSSL","product":"OpenSSL","tier":"tail","description":{"text":"If an X.509 certificate contains a malformed policy constraint and\npolicy processing is enabled, then a write lock will be taken twice\nrecursively.  On some operating systems (most widely: Windows) this\nresults in a denial of service when the affected process hangs.  Policy\nprocessing being enabled on a publicly facing server is not considered\nto be a common setup.\n\nPolicy processing is enabled by passing the `-policy'\nargument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.\n\nUpdate (31 March 2023): The description of the policy processing enablement\nwas corrected based on CVE-2023-0466.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.01312,"percentile":0.70561,"provenance":"source"},"cwes":[{"id":"CWE-667","name":"Improper Locking"}],"references":[{"url":"https://www.openssl.org/news/secadv/20221213.txt","tags":["vendor-advisory"]},{"url":"https://github.com/openssl/openssl/commit/7725e7bfe6f2ce8146b6552b44e0d226be7638e7","tags":["patch"]},{"url":"https://security.netapp.com/advisory/ntap-20230203-0003/","tags":[]}],"priority":{"score":19.4,"factors":[{"name":"EPSS percentile","points":14.11},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"openssl","affectedVersions":[{"vendor":"OpenSSL","product":"OpenSSL","versions":[">= 3.0.0, <= 3.0.7"]}],"affected":[{"ecosystem":"crates.io","package":"openssl-src","vulnerableRanges":[">=300.0.0, <300.0.12"],"patched":["300.0.12"],"from":["GHSA-vr8j-hgmm-jh9r"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-7750","exploited":false,"provenance":"source"}}