Alert GCSA-22053 - Vulnerabilita' in OpenSSL

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

*********************************************************************

Alert ID: GCSA-22053
Data: 05 Maggio 2022
Titolo: Vulnerabilita' in OpenSSL

**********************************************************************


:: Descrizione del problema

Sono state riscontrate vulnerabilita' multiple in OpenSSL che,
se sfruttate, potrebbero consentire ad un attaccante remoto di
provocare un Denial of Service, eseguire codice arbitrario
ed oltrepassare le restrizioni di sicurezza su un sistema che ne sia
affetto.


:: Sistemi e Software interessato

OpenSSL versioni 1.0.2, 1.1.1 e 3.0


:: Impatto

Denial of Service
Remote Code Execution
Security Restriction Bypass


:: Soluzioni

Aggiornare il software alle versioni 1.0.2ze, 1.1.1o e 3.0.3


:: Riferimenti

OpenSSL.org - Vulnerabilities
https://www.openssl.org/news/secadv/20220503.txt

Mitre CVE
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1343
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1434
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1473



GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iD8DBQFic305wZxMk2USYEIRAn8uAJ4tssg8H6UvALMByAMiHiULYm1MWgCg1voE
uMJYW31+e5i3H965V+mGzwM=
=0fRJ
-----END PGP SIGNATURE-----