CVE-2023-0466

The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function. Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument. Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications.

• CWE-295

• http://www.openwall.com/lists/oss-security/2023/09/28/4
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0aMailing List, Patch
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908Mailing List, Patch
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72Broken Link
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061Mailing List, Patch
• https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
• https://security.gentoo.org/glsa/202402-08
• https://security.netapp.com/advisory/ntap-20230414-0001/
• https://www.debian.org/security/2023/dsa-5417
• https://www.openssl.org/news/secadv/20230328.txtVendor Advisory
• http://www.openwall.com/lists/oss-security/2023/09/28/4
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0aMailing List, Patch
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908Mailing List, Patch
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72Broken Link
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061Mailing List, Patch
• https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html
• https://security.gentoo.org/glsa/202402-08
• https://security.netapp.com/advisory/ntap-20230414-0001/
• https://www.debian.org/security/2023/dsa-5417
• https://www.openssl.org/news/secadv/20230328.txtVendor Advisory

Published

Mar 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0460The YouTube Embedded 1.2 SDK binds to a service within the Y…7.3
• CVE-2023-0461There is a use-after-free vulnerability in the Linux Kernel …7.8
• CVE-2023-0462An arbitrary code execution flaw was found in Foreman. This …9.1
• CVE-2023-0463The force offline MFA prompt setting is not respected when s…3.3
• CVE-2023-0464A security vulnerability has been identified in all supporte…7.5
• CVE-2023-0465Applications that use a non-default option when verifying ce…5.3
• CVE-2023-0467The WP Dark Mode WordPress plugin before 4.0.8 does not prop…4.3
• CVE-2023-0468A use-after-free flaw was found in io_uring/poll.c in io_pol…4.7
• CVE-2023-0469A use-after-free flaw was found in io_uring/filetable.c in i…5.5
• CVE-2023-0470Cross-site Scripting (XSS) - Stored in GitHub repository mod…5.4
• CVE-2023-0471Use after free in WebTransport in Google Chrome prior to 109…8.8
• CVE-2023-0472Use after free in WebRTC in Google Chrome prior to 109.0.541…8.8