openssl-fips-provider vulnerabilities (Azure Linux)
45 vulnerabilities.
-
openssl-fips-providerAzure Linux Timing Side-Channel in SM2 Signature Generation 3.7 Low -
openssl-fips-providerAzure Linux Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
openssl-fips-providerAzure Linux NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
openssl-fips-providerAzure Linux Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
openssl-fips-providerAzure Linux Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
openssl-fips-providerAzure Linux DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
openssl-fips-providerAzure Linux Invalid Pointer Dereference in CMP Server via Crafted protectionAlg 7.5 High -
openssl-fips-providerAzure Linux Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
openssl-fips-providerAzure Linux Excessive Memory Use Buffering DTLS Records for a Future Epoch 7.5 High -
openssl-fips-providerAzure Linux AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
openssl-fips-providerAzure Linux Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
openssl-fips-providerAzure Linux Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
openssl-fips-providerAzure Linux Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
openssl-fips-providerAzure Linux Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
openssl-fips-providerAzure Linux AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
openssl-fips-providerAzure Linux NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
openssl-fips-providerAzure Linux Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
openssl-fips-providerAzure Linux CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
openssl-fips-providerAzure Linux Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
openssl-fips-providerAzure Linux Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
openssl-fips-providerAzure Linux Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
openssl-fips-providerAzure Linux NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
openssl-fips-providerAzure Linux Potential Use-after-free in DANE Client Code 8.1 High -
openssl-fips-providerAzure Linux ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
openssl-fips-providerAzure Linux Missing ASN1_TYPE validation in PKCS#12 parsing 5.5 Medium -
openssl-fips-providerAzure Linux NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
openssl-fips-providerAzure Linux Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
openssl-fips-providerAzure Linux Unauthenticated/unencrypted trailing bytes with low-level OCB function calls 4.0 Medium -
openssl-fips-providerAzure Linux Out-of-bounds read in HTTP client no_proxy handling 5.9 Medium -
openssl-fips-providerAzure Linux Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
openssl-fips-providerAzure Linux Timing side-channel in ECDSA signature computation 4.6 Medium -
openssl-fips-providerAzure Linux Low-level invalid GF(2^m) parameters lead to OOB memory access 8.8 High -
openssl-fips-providerAzure Linux RFC7250 handshakes with unauthenticated servers don't abort as expected 7.4 High -
openssl-fips-providerAzure Linux Possible denial of service in X.509 name checks 7.5 High -
openssl-fips-providerAzure Linux SSL_select_next_proto buffer overread 9.1 Critical -
openssl-fips-providerAzure Linux Use After Free with SSL_free_buffers 9.8 Critical -
openssl-fips-providerAzure Linux Excessive time spent checking DSA keys and parameters 5.3 Medium -
openssl-fips-providerAzure Linux Unbounded memory growth with session handling in TLSv1.3 5.9 Medium -
openssl-fips-providerAzure Linux PKCS12 Decoding crashes 5.5 Medium -
openssl-fips-providerAzure Linux Excessive time spent checking invalid RSA public keys 5.9 Medium -
openssl-fips-providerAzure Linux POLY1305 MAC implementation corrupts vector registers on PowerPC 6.5 Medium -
openssl-fips-providerAzure Linux Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
openssl-fips-providerAzure Linux Incorrect cipher key & IV length processing 7.5 High -
openssl-fips-providerAzure Linux POLY1305 MAC implementation corrupts XMM registers on Windows 7.8 High -
openssl-fips-providerAzure Linux There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... 6.5 Medium