openssl vulnerabilities (Alpaquita)
80 vulnerabilities.
opensslAlpaquitaUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumopensslAlpaquitaHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumopensslAlpaquitaTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumopensslAlpaquita'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslAlpaquitaNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslAlpaquitaStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslAlpaquitaImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslAlpaquitaOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslAlpaquitaTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslAlpaquitaOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslAlpaquitaThe x509 application adds trusted use instead of rejected use6.5 MediumopensslAlpaquitaTiming side-channel in ECDSA signature computation4.6 MediumopensslAlpaquitaLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 HighopensslAlpaquitaRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslAlpaquitaPossible denial of service in X.509 name checks7.5 HighopensslAlpaquitaValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 HighopensslAlpaquitaSSL_select_next_proto buffer overread9.1 CriticalopensslAlpaquitaUse After Free with SSL_free_buffers9.8 CriticalopensslAlpaquitaExcessive time spent checking DSA keys and parameters5.3 MediumopensslAlpaquitaUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslAlpaquitaPKCS12 Decoding crashes5.5 MediumopensslAlpaquitaExcessive time spent checking invalid RSA public keys5.9 MediumopensslAlpaquitaPython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5 HighopensslAlpaquitaExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslAlpaquitaIncorrect cipher key & IV length processing7.5 High