openssl-libs vulnerabilities (AlmaLinux)
79 vulnerabilities.
openssl-libsAlmaLinuxPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 Mediumopenssl-libsAlmaLinuxPHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-libsAlmaLinuxExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-libsAlmaLinuxIncorrect cipher key & IV length processing7.5 Highopenssl-libsAlmaLinuxExcessive time spent checking DH q parameter value5.3 Mediumopenssl-libsAlmaLinuxExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-libsAlmaLinuxAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-libsAlmaLinuxPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-libsAlmaLinuxInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-libsAlmaLinuxCertificate policy check not enabled5.3 Mediumopenssl-libsAlmaLinuxInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-libsAlmaLinuxExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-libsAlmaLinuxNULL dereference during PKCS7 data verification7.5 Highopenssl-libsAlmaLinuxX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-libsAlmaLinuxNULL dereference validating DSA public key7.5 Highopenssl-libsAlmaLinuxInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-libsAlmaLinuxUse-after-free following BIO_new_NDEF7.5 Highopenssl-libsAlmaLinuxDouble free after calling PEM_read_bio_ex7.5 Highopenssl-libsAlmaLinuxTiming Oracle in RSA Decryption5.9 Mediumopenssl-libsAlmaLinuxX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-libsAlmaLinuxX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-libsAlmaLinuxX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-libsAlmaLinuxUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-libsAlmaLinuxAES OCB fails to encrypt some bytes5.3 Mediumopenssl-libsAlmaLinuxThe c_rehash script allows command injection7.3 Highopenssl-libsAlmaLinuxResource leakage when decoding certificates and keys7.5 Highopenssl-libsAlmaLinuxOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Mediumopenssl-libsAlmaLinuxThe c_rehash script allows command injection7.3 Highopenssl-libsAlmaLinuxInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 High