openssl vulnerabilities (BellSoft Hardened Containers)
75 vulnerabilities.
-
opensslBellSoft Hardened Containers QUIC STREAM Fragment Metadata DoS 7.5 High -
opensslBellSoft Hardened Containers Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC 5.3 Medium -
opensslBellSoft Hardened Containers QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 7.5 High -
opensslBellSoft Hardened Containers Timing Side-Channel in SM2 Signature Generation 3.7 Low -
opensslBellSoft Hardened Containers Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
opensslBellSoft Hardened Containers NULL Pointer Dereference in CMP Client Revocation Response Handling 5.3 Medium -
opensslBellSoft Hardened Containers QUIC Connection-Level Flow Control is Not Enforced for Streams 5.3 Medium -
opensslBellSoft Hardened Containers Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake 7.5 High -
opensslBellSoft Hardened Containers Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V 3.7 Low -
opensslBellSoft Hardened Containers Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
opensslBellSoft Hardened Containers QUIC Unvalidated Amplification Credit may be Over Accounted 3.7 Low -
opensslBellSoft Hardened Containers Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
opensslBellSoft Hardened Containers DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
opensslBellSoft Hardened Containers Invalid Pointer Dereference in CMP Server via Crafted protectionAlg 7.5 High -
opensslBellSoft Hardened Containers QUIC ACK-only Packet Retention Can Cause Memory Exhaustion 7.5 High -
opensslBellSoft Hardened Containers CMP Indefinite Cache Growth of ExtraCerts 5.9 Medium -
opensslBellSoft Hardened Containers Untrusted Sender DN Used as Format String in CMP Response Validation 9.8 Critical -
opensslBellSoft Hardened Containers Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
opensslBellSoft Hardened Containers Excessive Memory Use Buffering DTLS Records for a Future Epoch 7.5 High -
opensslBellSoft Hardened Containers QUIC Server May Trigger Double Free When Processing INITIAL Packet 7.5 High -
opensslBellSoft Hardened Containers RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate 7.5 High -
opensslBellSoft Hardened Containers AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
opensslBellSoft Hardened Containers Unbounded Memory Growth in QUIC Server Incoming Channel Queue 7.5 High -
opensslBellSoft Hardened Containers Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
opensslBellSoft Hardened Containers Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
opensslBellSoft Hardened Containers Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
opensslBellSoft Hardened Containers Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
opensslBellSoft Hardened Containers AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
opensslBellSoft Hardened Containers FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
opensslBellSoft Hardened Containers Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
opensslBellSoft Hardened Containers Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
opensslBellSoft Hardened Containers NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
opensslBellSoft Hardened Containers Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
opensslBellSoft Hardened Containers NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
opensslBellSoft Hardened Containers Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
opensslBellSoft Hardened Containers CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
opensslBellSoft Hardened Containers PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
opensslBellSoft Hardened Containers Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
opensslBellSoft Hardened Containers Incorrect Failure Handling in RSA KEM RSASVE Encapsulation 7.5 High -
opensslBellSoft Hardened Containers Heap Buffer Overflow in Hexadecimal Conversion 9.8 Critical -
opensslBellSoft Hardened Containers Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
opensslBellSoft Hardened Containers Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
opensslBellSoft Hardened Containers NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
opensslBellSoft Hardened Containers Potential Use-after-free in DANE Client Code 8.1 High -
opensslBellSoft Hardened Containers OpenSSL TLS 1.3 server may choose unexpected key agreement group 6.5 Medium -
opensslBellSoft Hardened Containers ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
opensslBellSoft Hardened Containers Missing ASN1_TYPE validation in PKCS#12 parsing 5.5 Medium -
opensslBellSoft Hardened Containers NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
opensslBellSoft Hardened Containers Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
opensslBellSoft Hardened Containers Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High - Show olderLoading…