openssl-devel vulnerabilities (AlmaLinux)
79 vulnerabilities.
openssl-develAlmaLinuxPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 Mediumopenssl-develAlmaLinuxPHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-develAlmaLinuxExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-develAlmaLinuxIncorrect cipher key & IV length processing7.5 Highopenssl-develAlmaLinuxExcessive time spent checking DH q parameter value5.3 Mediumopenssl-develAlmaLinuxExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-develAlmaLinuxAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-develAlmaLinuxPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-develAlmaLinuxInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-develAlmaLinuxCertificate policy check not enabled5.3 Mediumopenssl-develAlmaLinuxInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-develAlmaLinuxExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-develAlmaLinuxNULL dereference during PKCS7 data verification7.5 Highopenssl-develAlmaLinuxX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-develAlmaLinuxNULL dereference validating DSA public key7.5 Highopenssl-develAlmaLinuxInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-develAlmaLinuxUse-after-free following BIO_new_NDEF7.5 Highopenssl-develAlmaLinuxDouble free after calling PEM_read_bio_ex7.5 Highopenssl-develAlmaLinuxTiming Oracle in RSA Decryption5.9 Mediumopenssl-develAlmaLinuxX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-develAlmaLinuxX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-develAlmaLinuxX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-develAlmaLinuxUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-develAlmaLinuxAES OCB fails to encrypt some bytes5.3 Mediumopenssl-develAlmaLinuxThe c_rehash script allows command injection7.3 Highopenssl-develAlmaLinuxResource leakage when decoding certificates and keys7.5 Highopenssl-develAlmaLinuxOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Mediumopenssl-develAlmaLinuxThe c_rehash script allows command injection7.3 Highopenssl-develAlmaLinuxInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 High