OpenSSL cert policy OID DoS (CVE-2023-0464)

Summary

Excessive resource consumption during certificate policy checking causes a DoS.

Vulnerability ID	Vulnerability Overview
CVE-2023-0464	Verifying a certificate chain containing an abnormally large number of policy tree object identifiers causes quadratic execution time, freezing the application.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices