openssl vulnerabilities (Debian)
301 vulnerabilities.
opensslDebianRSA implementation bug in AVX512IFMA instructions9.8 CriticalopensslDebianThe c_rehash script allows command injection7.3 HighopensslDebianThe c_rehash script allows command injection7.3 HighopensslDebianInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslDebianBN_mod_exp may produce incorrect results on MIPS5.9 MediumopensslDebianRead buffer overruns processing ASN.1 strings7.4 HighopensslDebianSM2 Decryption Buffer Overflow9.8 CriticalopensslDebianCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 HighopensslDebianNULL pointer deref in signature_algorithms processing5.9 MediumopensslDebianNull pointer deref in X509_issuer_and_serial_hash()5.9 MediumopensslDebianInteger overflow in CipherUpdate7.5 HighopensslDebianIncorrect SSLv2 rollback protection3.7 LowopensslDebianEDIPARTYNAME NULL pointer dereference5.9 MediumopensslDebianRaccoon attack3.7 LowopensslDebianSegmentation fault in SSL_check_chain7.5 HighopensslDebianrsaz_512_sqr overflow bug on x86_645.3 MediumopensslDebianopenssl - regression updateNo scoreopensslDebianPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LowopensslDebianFork Protection5.3 MediumopensslDebianECDSA remote timing attack4.7 MediumopensslDebianChaCha20-Poly1305 with long nonces7.4 HighopensslDebian0-byte record padding oracle5.9 MediumopensslDebianSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 MediumopensslDebianTiming attack against DSA5.9 MediumopensslDebianTiming attack against ECDSA signature generation5.9 MediumopensslDebianClient DoS due to large DH parameter7.5 HighopensslDebianCache timing vulnerability in RSA Key Generation5.9 MediumopensslDebianIncorrect CRYPTO_memcmp on HP-UX PA-RISC5.9 MediumopensslDebianConstructed ASN.1 types with a recursive definition could exceed the stack6.5 MediumopensslDebianThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumopensslDebianOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 MediumopensslDebianThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumopensslDebianWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumopensslDebianEncrypt-Then-Mac renegotiation crash7.5 HighopensslDebianBad (EC)DHE parameters cause a client crash7.5 HighopensslDebianChaCha20/Poly1305 heap-buffer-overflow7.5 HighopensslDebianCMS Null dereference7.5 HighopensslDebianBN_mod_exp may produce incorrect results on x86_645.9 MediumopensslDebianTruncated packet could crash via OOB read7.5 HighopensslDebianA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 MediumopensslDebianThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 MediumopensslDebianA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 HighopensslDebiancrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...7.5 HighopensslDebianopenssl - regression updateNo scoreopensslDebianMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighopensslDebianThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumopensslDebianInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...9.8 CriticalopensslDebianThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 HighopensslDebianThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 CriticalopensslDebianThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 High- Show moreLoading…