openssl3 vulnerabilities (Alpine)
41 vulnerabilities.
-
openssl3Alpine Excessive time spent checking DH q parameter value 5.3 Medium -
openssl3Alpine Excessive time spent checking DH keys and parameters 5.3 Medium -
openssl3Alpine AES-SIV implementation ignores empty associated data entries 5.3 Medium -
openssl3Alpine Possible DoS translating ASN.1 object identifiers 6.5 Medium -
openssl3Alpine Input buffer over-read in AES-XTS implementation on 64 bit ARM 5.9 Medium -
openssl3Alpine Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
openssl3Alpine Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
openssl3Alpine NULL dereference during PKCS7 data verification 7.5 High -
openssl3Alpine X.400 address type confusion in X.509 GeneralName 7.4 High -
openssl3Alpine NULL dereference validating DSA public key 7.5 High -
openssl3Alpine Invalid pointer dereference in d2i_PKCS7 functions 7.5 High -
openssl3Alpine Use-after-free following BIO_new_NDEF 7.5 High -
openssl3Alpine Double free after calling PEM_read_bio_ex 7.5 High -
openssl3Alpine Timing Oracle in RSA Decryption 5.9 Medium -
openssl3Alpine X.509 Name Constraints Read Buffer Overflow 4.9 Medium -
openssl3Alpine X.509 Policy Constraints Double Locking 7.5 High -
openssl3Alpine X.509 Email Address Variable Length Buffer Overflow 7.5 High -
openssl3Alpine X.509 Email Address 4-byte Buffer Overflow 7.5 High -
openssl3Alpine Using a Custom Cipher with NID_undef may lead to NULL encryption 7.5 High -
openssl3Alpine AES OCB fails to encrypt some bytes 5.3 Medium -
openssl3Alpine Resource leakage when decoding certificates and keys 7.5 High -
openssl3Alpine Incorrect MAC key used in the RC4-MD5 ciphersuite 5.9 Medium -
openssl3Alpine OCSP_basic_verify may incorrectly verify the response signing certificate 5.3 Medium -
openssl3Alpine Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
openssl3Alpine Invalid handling of X509_verify_cert() internal errors in libssl 7.5 High -
openssl3Alpine Read buffer overruns processing ASN.1 strings 7.4 High -
openssl3Alpine SM2 Decryption Buffer Overflow 9.8 Critical -
openssl3Alpine CA certificate check bypass with X509_V_FLAG_X509_STRICT 7.4 High -
openssl3Alpine NULL pointer deref in signature_algorithms processing 5.9 Medium -
openssl3Alpine Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
openssl3Alpine Integer overflow in CipherUpdate 7.5 High -
openssl3Alpine Incorrect SSLv2 rollback protection 3.7 Low -
openssl3Alpine EDIPARTYNAME NULL pointer dereference 5.9 Medium -
openssl3Alpine Segmentation fault in SSL_check_chain 7.5 High -
openssl3Alpine rsaz_512_sqr overflow bug on x86_64 5.3 Medium -
openssl3Alpine Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 3.7 Low -
openssl3Alpine Fork Protection 5.3 Medium -
openssl3Alpine ECDSA remote timing attack 4.7 Medium -
openssl3Alpine ChaCha20-Poly1305 with long nonces 7.4 High -
openssl3Alpine Timing attack against DSA 5.9 Medium -
openssl3Alpine Timing attack against ECDSA signature generation 5.9 Medium