openssl vulnerabilities (Azure Linux)
77 vulnerabilities.
opensslAzure LinuxTiming side-channel in ECDSA signature computation4.6 MediumopensslAzure LinuxRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslAzure LinuxPossible denial of service in X.509 name checks7.5 HighopensslAzure LinuxSSL_select_next_proto buffer overread9.1 CriticalopensslAzure LinuxUse After Free with SSL_free_buffers9.8 CriticalopensslAzure LinuxExcessive time spent checking DSA keys and parameters5.3 MediumopensslAzure LinuxUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslAzure LinuxPKCS12 Decoding crashes5.5 MediumopensslAzure LinuxExcessive time spent checking invalid RSA public keys5.9 MediumopensslAzure LinuxPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslAzure LinuxExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslAzure LinuxExcessive time spent checking DH q parameter value5.3 MediumopensslAzure LinuxExcessive time spent checking DH keys and parameters5.3 MediumopensslAzure LinuxPossible DoS translating ASN.1 object identifiers6.5 MediumopensslAzure LinuxCertificate policy check not enabled5.3 MediumopensslAzure LinuxInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslAzure LinuxX.400 address type confusion in X.509 GeneralName7.4 HighopensslAzure LinuxUse-after-free following BIO_new_NDEF7.5 HighopensslAzure LinuxDouble free after calling PEM_read_bio_ex7.5 HighopensslAzure LinuxTiming Oracle in RSA Decryption5.9 MediumopensslAzure LinuxAES OCB fails to encrypt some bytes5.3 MediumopensslAzure LinuxThe c_rehash script allows command injection7.3 HighopensslAzure LinuxThe c_rehash script allows command injection7.3 HighopensslAzure LinuxInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslAzure LinuxBN_mod_exp may produce incorrect results on MIPS5.9 MediumopensslAzure LinuxRead buffer overruns processing ASN.1 strings7.4 HighopensslAzure LinuxSM2 Decryption Buffer Overflow9.8 Critical