openssl1.1-compat vulnerabilities (Alpine)

23 vulnerabilities.

• openssl1.1-compat Alpine Excessive time spent checking DH keys and parameters CVE-2023-3446 Fix available 5.3 MediumJuly 19, 2023
• openssl1.1-compat Alpine Invalid certificate policies in leaf certificates are silently ignored CVE-2023-0465 Fix available 5.3 MediumMarch 28, 2023
• openssl1.1-compat Alpine Excessive Resource Usage Verifying X.509 Policy Constraints CVE-2023-0464 Public exploitFix available 7.5 HighMarch 22, 2023
• openssl1.1-compat Alpine X.400 address type confusion in X.509 GeneralName CVE-2023-0286 Fix available EPSS 69.3% 7.4 HighFebruary 7, 2023
• openssl1.1-compat Alpine Use-after-free following BIO_new_NDEF CVE-2023-0215 Fix available 7.5 HighFebruary 7, 2023
• openssl1.1-compat Alpine Double free after calling PEM_read_bio_ex CVE-2022-4450 Fix available EPSS 28.6% 7.5 HighFebruary 7, 2023
• openssl1.1-compat Alpine Timing Oracle in RSA Decryption CVE-2022-4304 Public exploitFix available EPSS 23.5% 5.9 MediumFebruary 7, 2023
• openssl1.1-compat Alpine AES OCB fails to encrypt some bytes CVE-2022-2097 Public exploitFix available 5.3 MediumJuly 5, 2022
• openssl1.1-compat Alpine Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVE-2022-0778 Public exploitFix available EPSS 73.2% 7.5 HighMarch 15, 2022
• openssl1.1-compat Alpine Read buffer overruns processing ASN.1 strings CVE-2021-3712 Public exploitFix available EPSS 48.1% 7.4 HighAugust 24, 2021
• openssl1.1-compat Alpine SM2 Decryption Buffer Overflow CVE-2021-3711 Fix available EPSS 87.8% 9.8 CriticalAugust 24, 2021
• openssl1.1-compat Alpine CA certificate check bypass with X509_V_FLAG_X509_STRICT CVE-2021-3450 Public exploitFix available EPSS 18.3% 7.4 HighMarch 25, 2021
• openssl1.1-compat Alpine NULL pointer deref in signature_algorithms processing CVE-2021-3449 Public exploitFix available EPSS 63.5% 5.9 MediumMarch 25, 2021
• openssl1.1-compat Alpine Null pointer deref in X509_issuer_and_serial_hash() CVE-2021-23841 Public exploitFix available 5.9 MediumFebruary 16, 2021
• openssl1.1-compat Alpine Integer overflow in CipherUpdate CVE-2021-23840 Public exploitFix available EPSS 50.7% 7.5 HighFebruary 16, 2021
• openssl1.1-compat Alpine Incorrect SSLv2 rollback protection CVE-2021-23839 Fix available 3.7 LowFebruary 16, 2021
• openssl1.1-compat Alpine EDIPARTYNAME NULL pointer dereference CVE-2020-1971 Public exploitFix available 5.9 MediumDecember 8, 2020
• openssl1.1-compat Alpine Segmentation fault in SSL_check_chain CVE-2020-1967 Public exploitFix available EPSS 53.3% 7.5 HighApril 21, 2020
• openssl1.1-compat Alpine rsaz_512_sqr overflow bug on x86_64 CVE-2019-1551 Fix available EPSS 14.3% 5.3 MediumDecember 6, 2019
• openssl1.1-compat Alpine Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey CVE-2019-1563 Fix available 3.7 LowSeptember 10, 2019
• openssl1.1-compat Alpine Fork Protection CVE-2019-1549 Fix available 5.3 MediumSeptember 10, 2019
• openssl1.1-compat Alpine ECDSA remote timing attack CVE-2019-1547 Fix available 4.7 MediumSeptember 10, 2019
• openssl1.1-compat Alpine ChaCha20-Poly1305 with long nonces CVE-2019-1543 Fix available 7.4 HighMarch 6, 2019