openssl-debugsource vulnerabilities (Red Hat)
104 vulnerabilities.
openssl-debugsourceRed HatPHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-debugsourceRed HatExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-debugsourceRed HatIncorrect cipher key & IV length processing7.5 Highopenssl-debugsourceRed HatExcessive time spent checking DH q parameter value5.3 Mediumopenssl-debugsourceRed HatExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-debugsourceRed HatAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-debugsourceRed HatPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-debugsourceRed HatInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-debugsourceRed HatCertificate policy check not enabled5.3 Mediumopenssl-debugsourceRed HatInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-debugsourceRed HatExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-debugsourceRed HatNULL dereference during PKCS7 data verification7.5 Highopenssl-debugsourceRed HatX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-debugsourceRed HatNULL dereference validating DSA public key7.5 Highopenssl-debugsourceRed HatInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-debugsourceRed HatUse-after-free following BIO_new_NDEF7.5 Highopenssl-debugsourceRed HatDouble free after calling PEM_read_bio_ex7.5 Highopenssl-debugsourceRed HatTiming Oracle in RSA Decryption5.9 Mediumopenssl-debugsourceRed HatX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-debugsourceRed HatX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-debugsourceRed HatX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-debugsourceRed HatUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-debugsourceRed HatAES OCB fails to encrypt some bytes5.3 Mediumopenssl-debugsourceRed HatThe c_rehash script allows command injection7.3 Highopenssl-debugsourceRed HatResource leakage when decoding certificates and keys7.5 Highopenssl-debugsourceRed HatOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Mediumopenssl-debugsourceRed HatThe c_rehash script allows command injection7.3 Highopenssl-debugsourceRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highopenssl-debugsourceRed HatRead buffer overruns processing ASN.1 strings7.4 Highopenssl-debugsourceRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highopenssl-debugsourceRed HatNULL pointer deref in signature_algorithms processing5.9 Mediumopenssl-debugsourceRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumopenssl-debugsourceRed HatInteger overflow in CipherUpdate7.5 Highopenssl-debugsourceRed HatEDIPARTYNAME NULL pointer dereference5.9 Mediumopenssl-debugsourceRed Hatrsaz_512_sqr overflow bug on x86_645.3 Mediumopenssl-debugsourceRed HatPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowopenssl-debugsourceRed HatFork Protection5.3 Mediumopenssl-debugsourceRed HatECDSA remote timing attack4.7 Mediumopenssl-debugsourceRed HatChaCha20-Poly1305 with long nonces7.4 Highopenssl-debugsourceRed HatTiming attack against DSA5.9 Mediumopenssl-debugsourceRed HatTiming attack against ECDSA signature generation5.9 Medium