openssl vulnerabilities (BellSoft Hardened Containers)
80 vulnerabilities.
opensslBellSoft Hardened ContainersUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumopensslBellSoft Hardened ContainersHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumopensslBellSoft Hardened ContainersTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumopensslBellSoft Hardened Containers'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslBellSoft Hardened ContainersNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslBellSoft Hardened ContainersStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslBellSoft Hardened ContainersImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslBellSoft Hardened ContainersOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslBellSoft Hardened ContainersTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslBellSoft Hardened ContainersOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslBellSoft Hardened ContainersThe x509 application adds trusted use instead of rejected use6.5 MediumopensslBellSoft Hardened ContainersTiming side-channel in ECDSA signature computation4.6 MediumopensslBellSoft Hardened ContainersLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 HighopensslBellSoft Hardened ContainersRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslBellSoft Hardened ContainersPossible denial of service in X.509 name checks7.5 HighopensslBellSoft Hardened ContainersValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 HighopensslBellSoft Hardened ContainersSSL_select_next_proto buffer overread9.1 CriticalopensslBellSoft Hardened ContainersUse After Free with SSL_free_buffers9.8 CriticalopensslBellSoft Hardened ContainersExcessive time spent checking DSA keys and parameters5.3 MediumopensslBellSoft Hardened ContainersUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslBellSoft Hardened ContainersPKCS12 Decoding crashes5.5 MediumopensslBellSoft Hardened ContainersExcessive time spent checking invalid RSA public keys5.9 MediumopensslBellSoft Hardened ContainersPython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5 HighopensslBellSoft Hardened ContainersExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslBellSoft Hardened ContainersIncorrect cipher key & IV length processing7.5 High