CVE-2002-20001 describes an issue with Diffie-Hellman key exchange (DHE), and affects all applications that make use of this protocol. Other key exchange protocols such as Elliptic Curve Diffie-Hellman (ECDHE) are not affected by this issue.

Mitigation for this issue will depend on the affected application. The most effective approach is to disable the use of Diffie-Hellman key exchange (DHE) and make use of Elliptic Curve Diffie-Hellman (ECDHE) instead. However, in some cases this may cause connectivity issues with older clients and therefore is not often the default configuration. Additional information about this CVE and mitigation guidance is available from the OpenSSL Project [1].

[1] https://www.openssl.org/blog/blog/2022/10/21/tls-groups-configuration/