openssl-debuginfo vulnerabilities (Red Hat)
228 vulnerabilities.
openssl-debuginfoRed HatPHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-debuginfoRed HatExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-debuginfoRed HatIncorrect cipher key & IV length processing7.5 Highopenssl-debuginfoRed HatExcessive time spent checking DH q parameter value5.3 Mediumopenssl-debuginfoRed HatExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-debuginfoRed HatAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-debuginfoRed HatPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-debuginfoRed HatInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-debuginfoRed HatCertificate policy check not enabled5.3 Mediumopenssl-debuginfoRed HatInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-debuginfoRed HatExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-debuginfoRed HatNULL dereference during PKCS7 data verification7.5 Highopenssl-debuginfoRed HatX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-debuginfoRed HatNULL dereference validating DSA public key7.5 Highopenssl-debuginfoRed HatInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-debuginfoRed HatUse-after-free following BIO_new_NDEF7.5 Highopenssl-debuginfoRed HatDouble free after calling PEM_read_bio_ex7.5 Highopenssl-debuginfoRed HatTiming Oracle in RSA Decryption5.9 Mediumopenssl-debuginfoRed HatX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-debuginfoRed HatX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-debuginfoRed HatX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-debuginfoRed HatUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-debuginfoRed HatAES OCB fails to encrypt some bytes5.3 Mediumopenssl-debuginfoRed HatThe c_rehash script allows command injection7.3 Highopenssl-debuginfoRed HatResource leakage when decoding certificates and keys7.5 Highopenssl-debuginfoRed HatOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Mediumopenssl-debuginfoRed HatThe c_rehash script allows command injection7.3 Highopenssl-debuginfoRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highopenssl-debuginfoRed HatRead buffer overruns processing ASN.1 strings7.4 Highopenssl-debuginfoRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highopenssl-debuginfoRed HatNULL pointer deref in signature_algorithms processing5.9 Mediumopenssl-debuginfoRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumopenssl-debuginfoRed HatInteger overflow in CipherUpdate7.5 Highopenssl-debuginfoRed HatEDIPARTYNAME NULL pointer dereference5.9 Mediumopenssl-debuginfoRed Hatrsaz_512_sqr overflow bug on x86_645.3 Mediumopenssl-debuginfoRed HatPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowopenssl-debuginfoRed HatFork Protection5.3 Mediumopenssl-debuginfoRed HatECDSA remote timing attack4.7 Mediumopenssl-debuginfoRed HatChaCha20-Poly1305 with long nonces7.4 Highopenssl-debuginfoRed Hat0-byte record padding oracle5.9 Mediumopenssl-debuginfoRed HatSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Mediumopenssl-debuginfoRed HatTiming attack against DSA5.9 Mediumopenssl-debuginfoRed HatTiming attack against ECDSA signature generation5.9 Mediumopenssl-debuginfoRed HatLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Mediumopenssl-debuginfoRed HatClient DoS due to large DH parameter7.5 Highopenssl-debuginfoRed HatCache timing vulnerability in RSA Key Generation5.9 Mediumopenssl-debuginfoRed HatConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Mediumopenssl-debuginfoRed HatThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediumopenssl-debuginfoRed HatOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 Mediumopenssl-debuginfoRed HatThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Medium- Show moreLoading…