openssl vulnerabilities (Debian)
301 vulnerabilities.
opensslDebianMissing ASN1_TYPE validation in PKCS#12 parsing5.5 MediumopensslDebianNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 HighopensslDebianMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 HighopensslDebianOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 HighopensslDebianUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumopensslDebianHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumopensslDebianTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumopensslDebian'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslDebianNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslDebianStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslDebianImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslDebianOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslDebianTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslDebianOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslDebianThe x509 application adds trusted use instead of rejected use6.5 MediumopensslDebianOpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack,...5.3 MediumopensslDebianTiming side-channel in ECDSA signature computation4.6 MediumopensslDebianLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 HighopensslDebianRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslDebianPossible denial of service in X.509 name checks7.5 HighopensslDebianSSL_select_next_proto buffer overread9.1 CriticalopensslDebianUse After Free with SSL_free_buffers9.8 CriticalopensslDebianExcessive time spent checking DSA keys and parameters5.3 MediumopensslDebianUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslDebianPKCS12 Decoding crashes5.5 MediumopensslDebianExcessive time spent checking invalid RSA public keys5.9 MediumopensslDebianPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslDebianExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslDebianIncorrect cipher key & IV length processing7.5 HighopensslDebianExcessive time spent checking DH q parameter value5.3 MediumopensslDebianExcessive time spent checking DH keys and parameters5.3 MediumopensslDebianAES-SIV implementation ignores empty associated data entries5.3 MediumopensslDebianPossible DoS translating ASN.1 object identifiers6.5 MediumopensslDebianInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 MediumopensslDebianCertificate policy check not enabled5.3 MediumopensslDebianInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslDebianExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslDebianNULL dereference during PKCS7 data verification7.5 HighopensslDebianX.400 address type confusion in X.509 GeneralName7.4 HighopensslDebianNULL dereference validating DSA public key7.5 HighopensslDebianInvalid pointer dereference in d2i_PKCS7 functions7.5 HighopensslDebianUse-after-free following BIO_new_NDEF7.5 HighopensslDebianDouble free after calling PEM_read_bio_ex7.5 HighopensslDebianTiming Oracle in RSA Decryption5.9 MediumopensslDebianX.509 Name Constraints Read Buffer Overflow4.9 MediumopensslDebianX.509 Policy Constraints Double Locking7.5 HighopensslDebianX.509 Email Address Variable Length Buffer Overflow7.5 HighopensslDebianX.509 Email Address 4-byte Buffer Overflow7.5 HighopensslDebianUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 HighopensslDebianAES OCB fails to encrypt some bytes5.3 Medium- Show moreLoading…