openssl vulnerabilities (Alpine)
143 vulnerabilities.
opensslAlpineNULL pointer deref in signature_algorithms processing5.9 MediumopensslAlpineNull pointer deref in X509_issuer_and_serial_hash()5.9 MediumopensslAlpineInteger overflow in CipherUpdate7.5 HighopensslAlpineIncorrect SSLv2 rollback protection3.7 LowopensslAlpineEDIPARTYNAME NULL pointer dereference5.9 MediumopensslAlpineSegmentation fault in SSL_check_chain7.5 HighopensslAlpinersaz_512_sqr overflow bug on x86_645.3 MediumopensslAlpinePadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LowopensslAlpineFork Protection5.3 MediumopensslAlpineECDSA remote timing attack4.7 MediumopensslAlpineChaCha20-Poly1305 with long nonces7.4 HighopensslAlpine0-byte record padding oracle5.9 MediumopensslAlpineSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 MediumopensslAlpineTiming attack against DSA5.9 MediumopensslAlpineTiming attack against ECDSA signature generation5.9 MediumopensslAlpineClient DoS due to large DH parameter7.5 HighopensslAlpineCache timing vulnerability in RSA Key Generation5.9 MediumopensslAlpineIncorrect CRYPTO_memcmp on HP-UX PA-RISC5.9 MediumopensslAlpineConstructed ASN.1 types with a recursive definition could exceed the stack6.5 MediumopensslAlpineThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumopensslAlpineOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 MediumopensslAlpineThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumopensslAlpineWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumopensslAlpineBN_mod_exp may produce incorrect results on x86_645.9 MediumopensslAlpineTruncated packet could crash via OOB read7.5 HighopensslAlpineThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 MediumopensslAlpinecrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...7.5 HighopensslAlpineMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighopensslAlpineThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumopensslAlpineInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...9.8 CriticalopensslAlpineThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 HighopensslAlpineThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 CriticalopensslAlpineThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 HighopensslAlpineThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 HighopensslAlpineThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighopensslAlpineThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 HighopensslAlpineThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 MediumopensslAlpineOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 CriticalopensslAlpineThe X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2...8.2 HighopensslAlpineThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 MediumopensslAlpineInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 HighopensslAlpineInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 HighopensslAlpineThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 High