openssl-debuginfo vulnerabilities (Red Hat)
228 vulnerabilities.
openssl-debuginfoRed HatWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Mediumopenssl-debuginfoRed HatTruncated packet could crash via OOB read7.5 Highopenssl-debuginfoRed HatA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 Mediumopenssl-debuginfoRed HatA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 Highopenssl-debuginfoRed HatMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 Highopenssl-debuginfoRed HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Mediumopenssl-debuginfoRed HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 Highopenssl-debuginfoRed HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 Criticalopenssl-debuginfoRed HatThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 Highopenssl-debuginfoRed HatThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 Highopenssl-debuginfoRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 Highopenssl-debuginfoRed HatThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 Highopenssl-debuginfoRed HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Mediumopenssl-debuginfoRed HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 Criticalopenssl-debuginfoRed HatThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...9.8 Criticalopenssl-debuginfoRed HatThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 Mediumopenssl-debuginfoRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 Highopenssl-debuginfoRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 Highopenssl-debuginfoRed HatThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 Highopenssl-debuginfoRed HatAn oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2...5.9 Mediumopenssl-debuginfoRed HatThe get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9...5.9 Mediumopenssl-debuginfoRed HatThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...9.8 Criticalopenssl-debuginfoRed HatThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 Mediumopenssl-debuginfoRed HatThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...9.8 Criticalopenssl-debuginfoRed HatMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...7.5 Highopenssl-debuginfoRed HatThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...5.1 Mediumopenssl-debuginfoRed HatDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...9.8 Criticalopenssl-debuginfoRed Hatssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of...5.9 Mediumopenssl-debuginfoRed HatMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 Mediumopenssl-debuginfoRed Hatssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 Mediumopenssl-debuginfoRed HatThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...5.3 Mediumopenssl-debuginfoRed Hatcrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...7.5 Highopenssl-debuginfoRed HatThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,...7.5 Highopenssl-debuginfoRed HatMemory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1...5.0 Mediumopenssl-debuginfoRed HatThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...4.3 Mediumopenssl-debuginfoRed HatRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 Mediumopenssl-debuginfoRed HatThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...6.8 Mediumopenssl-debuginfoRed HatThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...4.3 Mediumopenssl-debuginfoRed HatRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 Mediumopenssl-debuginfoRed HatThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...7.5 Highopenssl-debuginfoRed HatThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...4.3 Mediumopenssl-debuginfoRed HatThe DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f...5.8 Mediumopenssl-debuginfoRed HatThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...4.3 Mediumopenssl-debuginfoRed HatRace condition in a certain Red Hat patch to the PRNG lock implementation in the...4.3 Mediumopenssl-debuginfoRed HatThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...5.0 Mediumopenssl-debuginfoRed HatRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...6.8 Mediumopenssl-debuginfoRed HatUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...6.8 Mediumopenssl-debuginfoRed HatOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...5.0 Mediumopenssl-debuginfoRed HatMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...7.1 Highopenssl-debuginfoRed HatMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...7.1 High- Show moreLoading…