CVE-2023-5678
MediumSummary
Generating or checking excessively long X9.42 DH keys may be very slow. Applications using DH_generate_key() or DH_check() functions may experience long delays.
Risk Assessment
An attacker could exploit this vulnerability to perform a DoS attack by forcing the server to generate or check overly long keys, leading to significant slowdown or resource exhaustion.
Recommendation
It is recommended to limit the maximum length of X9.42 DH keys in application configuration and update to the latest OpenSSL version that includes fixes to limit processing time for long keys.
Original NVD description (English source)
Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check