openssl vulnerabilities (AlmaLinux)
79 vulnerabilities.
opensslAlmaLinuxPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslAlmaLinuxPHP is vulnerable to the Marvin Attack5.9 MediumopensslAlmaLinuxExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslAlmaLinuxIncorrect cipher key & IV length processing7.5 HighopensslAlmaLinuxExcessive time spent checking DH q parameter value5.3 MediumopensslAlmaLinuxExcessive time spent checking DH keys and parameters5.3 MediumopensslAlmaLinuxAES-SIV implementation ignores empty associated data entries5.3 MediumopensslAlmaLinuxPossible DoS translating ASN.1 object identifiers6.5 MediumopensslAlmaLinuxInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 MediumopensslAlmaLinuxCertificate policy check not enabled5.3 MediumopensslAlmaLinuxInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslAlmaLinuxExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslAlmaLinuxNULL dereference during PKCS7 data verification7.5 HighopensslAlmaLinuxX.400 address type confusion in X.509 GeneralName7.4 HighopensslAlmaLinuxNULL dereference validating DSA public key7.5 HighopensslAlmaLinuxInvalid pointer dereference in d2i_PKCS7 functions7.5 HighopensslAlmaLinuxUse-after-free following BIO_new_NDEF7.5 HighopensslAlmaLinuxDouble free after calling PEM_read_bio_ex7.5 HighopensslAlmaLinuxTiming Oracle in RSA Decryption5.9 MediumopensslAlmaLinuxX.509 Name Constraints Read Buffer Overflow4.9 MediumopensslAlmaLinuxX.509 Email Address Variable Length Buffer Overflow7.5 HighopensslAlmaLinuxX.509 Email Address 4-byte Buffer Overflow7.5 HighopensslAlmaLinuxUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 HighopensslAlmaLinuxAES OCB fails to encrypt some bytes5.3 MediumopensslAlmaLinuxThe c_rehash script allows command injection7.3 HighopensslAlmaLinuxResource leakage when decoding certificates and keys7.5 HighopensslAlmaLinuxOCSP_basic_verify may incorrectly verify the response signing certificate5.3 MediumopensslAlmaLinuxThe c_rehash script allows command injection7.3 HighopensslAlmaLinuxInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 High