openssl vulnerabilities (Alpine)
143 vulnerabilities.
opensslAlpine'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslAlpineNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslAlpineStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslAlpineImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslAlpineOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslAlpineTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslAlpineOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslAlpineThe x509 application adds trusted use instead of rejected use6.5 MediumopensslAlpineTiming side-channel in ECDSA signature computation4.6 MediumopensslAlpineLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 HighopensslAlpineRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslAlpinePossible denial of service in X.509 name checks7.5 HighopensslAlpineSSL_select_next_proto buffer overread9.1 CriticalopensslAlpineUse After Free with SSL_free_buffers9.8 CriticalopensslAlpineExcessive time spent checking DSA keys and parameters5.3 MediumopensslAlpineUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslAlpinePKCS12 Decoding crashes5.5 MediumopensslAlpineExcessive time spent checking invalid RSA public keys5.9 MediumopensslAlpinePOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslAlpineExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslAlpineIncorrect cipher key & IV length processing7.5 HighopensslAlpineExcessive time spent checking DH q parameter value5.3 MediumopensslAlpineExcessive time spent checking DH keys and parameters5.3 MediumopensslAlpineAES-SIV implementation ignores empty associated data entries5.3 MediumopensslAlpinePossible DoS translating ASN.1 object identifiers6.5 MediumopensslAlpineInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 MediumopensslAlpineCertificate policy check not enabled5.3 MediumopensslAlpineInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslAlpineExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslAlpineNULL dereference during PKCS7 data verification7.5 HighopensslAlpineX.400 address type confusion in X.509 GeneralName7.4 HighopensslAlpineNULL dereference validating DSA public key7.5 HighopensslAlpineInvalid pointer dereference in d2i_PKCS7 functions7.5 HighopensslAlpineUse-after-free following BIO_new_NDEF7.5 HighopensslAlpineDouble free after calling PEM_read_bio_ex7.5 HighopensslAlpineTiming Oracle in RSA Decryption5.9 MediumopensslAlpineX.509 Name Constraints Read Buffer Overflow4.9 MediumopensslAlpineX.509 Policy Constraints Double Locking7.5 HighopensslAlpineX.509 Email Address Variable Length Buffer Overflow7.5 HighopensslAlpineX.509 Email Address 4-byte Buffer Overflow7.5 HighopensslAlpineUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 HighopensslAlpineAES OCB fails to encrypt some bytes5.3 MediumopensslAlpineResource leakage when decoding certificates and keys7.5 HighopensslAlpineIncorrect MAC key used in the RC4-MD5 ciphersuite5.9 MediumopensslAlpineOCSP_basic_verify may incorrectly verify the response signing certificate5.3 MediumopensslAlpineInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslAlpineInvalid handling of X509_verify_cert() internal errors in libssl7.5 HighopensslAlpineRead buffer overruns processing ASN.1 strings7.4 HighopensslAlpineSM2 Decryption Buffer Overflow9.8 CriticalopensslAlpineCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 High- Show moreLoading…