OpenSSL_jll vulnerabilities (Julia)
79 vulnerabilities.
-
OpenSSL_jllJulia Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
OpenSSL_jllJulia Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
OpenSSL_jllJulia Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
OpenSSL_jllJulia Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
OpenSSL_jllJulia AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
OpenSSL_jllJulia FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
OpenSSL_jllJulia Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
OpenSSL_jllJulia Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
OpenSSL_jllJulia NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
OpenSSL_jllJulia Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
OpenSSL_jllJulia NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
OpenSSL_jllJulia Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
OpenSSL_jllJulia CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
OpenSSL_jllJulia PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
OpenSSL_jllJulia Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
OpenSSL_jllJulia Incorrect Failure Handling in RSA KEM RSASVE Encapsulation 7.5 High -
OpenSSL_jllJulia Heap Buffer Overflow in Hexadecimal Conversion 9.8 Critical -
OpenSSL_jllJulia Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
OpenSSL_jllJulia Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
OpenSSL_jllJulia NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
OpenSSL_jllJulia Potential Use-after-free in DANE Client Code 8.1 High -
OpenSSL_jllJulia OpenSSL TLS 1.3 server may choose unexpected key agreement group 6.5 Medium -
OpenSSL_jllJulia ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
OpenSSL_jllJulia Missing ASN1_TYPE validation in PKCS#12 parsing 5.5 Medium -
OpenSSL_jllJulia NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
OpenSSL_jllJulia Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
OpenSSL_jllJulia Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
OpenSSL_jllJulia Unauthenticated/unencrypted trailing bytes with low-level OCB function calls 4.0 Medium -
OpenSSL_jllJulia Heap out-of-bounds write in BIO_f_linebuffer on short writes 4.7 Medium -
OpenSSL_jllJulia TLS 1.3 CompressedCertificate excessive memory allocation 5.9 Medium -
OpenSSL_jllJulia 'openssl dgst' one-shot codepath silently truncates inputs >16MB 5.5 Medium -
OpenSSL_jllJulia NULL dereference in SSL_CIPHER_find() function on unknown cipher ID 5.9 Medium -
OpenSSL_jllJulia Stack buffer overflow in CMS (Auth)EnvelopedData parsing 8.8 High -
OpenSSL_jllJulia Improper validation of PBMAC1 parameters in PKCS#12 MAC verification 6.1 Medium -
OpenSSL_jllJulia Out-of-bounds read in HTTP client no_proxy handling 5.9 Medium -
OpenSSL_jllJulia Timing side-channel in SM2 algorithm on 64 bit ARM 5.9 Medium -
OpenSSL_jllJulia Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
OpenSSL_jllJulia The x509 application adds trusted use instead of rejected use 6.5 Medium -
OpenSSL_jllJulia Timing side-channel in ECDSA signature computation 4.6 Medium -
OpenSSL_jllJulia Low-level invalid GF(2^m) parameters lead to OOB memory access 8.8 High -
OpenSSL_jllJulia Possible denial of service in X.509 name checks 7.5 High -
OpenSSL_jllJulia SSL_select_next_proto buffer overread 9.1 Critical -
OpenSSL_jllJulia Use After Free with SSL_free_buffers 9.8 Critical -
OpenSSL_jllJulia Excessive time spent checking DSA keys and parameters 5.3 Medium -
OpenSSL_jllJulia Unbounded memory growth with session handling in TLSv1.3 5.9 Medium -
OpenSSL_jllJulia PKCS12 Decoding crashes 5.5 Medium -
OpenSSL_jllJulia Excessive time spent checking invalid RSA public keys 5.9 Medium -
OpenSSL_jllJulia POLY1305 MAC implementation corrupts vector registers on PowerPC 6.5 Medium -
OpenSSL_jllJulia Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
OpenSSL_jllJulia Incorrect cipher key & IV length processing 7.5 High - Show olderLoading…