openssl vulnerabilities (Debian)
301 vulnerabilities.
opensslDebianOpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent...4.3 MediumopensslDebianOpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...4.3 MediumopensslDebianMultiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...7.6 HighopensslDebianDouble free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl...4.3 MediumopensslDebianThe Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before...7.5 HighopensslDebianThe ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote...5.0 MediumopensslDebianOpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1...10.0 HighopensslDebianMemory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and...5.0 MediumopensslDebianApache Tomcat affected by vulnerability in TLS and SSL protocol5.8 MediumopensslDebianThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...5.1 MediumopensslDebianThe dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2...5.0 MediumopensslDebianssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL...5.0 MediumopensslDebianUse-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in...5.0 MediumopensslDebianMultiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in...5.0 MediumopensslDebianThe dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions...5.0 MediumopensslDebianThe ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a...5.0 MediumopensslDebianOpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed...7.5 HighopensslDebianOpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal...5.8 MediumopensslDebianOpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS...4.3 MediumopensslDebianDouble free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are...4.3 MediumopensslDebianOpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random...7.5 HighopensslDebianOff-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote...9.3 HighopensslDebianOff-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8...6.8 MediumopensslDebianThe BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not...1.2 LowopensslDebianThe get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...4.3 MediumopensslDebianBuffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...10.0 HighopensslDebianOpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause...7.8 HighopensslDebianOpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of...7.8 HighopensslDebianOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass9.1 CriticalopensslDebianThe SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when...5.0 MediumopensslDebianThe default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead...7.5 HighopensslDebianThe der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...2.1 LowopensslDebianThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...5.0 MediumopensslDebianOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...5.0 MediumopensslDebianThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...7.5 HighopensslDebianOpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe...5.0 MediumopensslDebianDouble free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service ...9.8 CriticalopensslDebianOpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs,...5.0 MediumopensslDebianInteger overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service ...5.0 MediumopensslDebianThe SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote...7.5 HighopensslDebianOpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain...5.0 MediumopensslDebianssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a...5.0 MediumopensslDebianThe ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote...5.0 MediumopensslDebianBuffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to...7.5 HighopensslDebianBuffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote...7.5 HighopensslDebianOpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII...7.5 High