openssl-devel-engine vulnerabilities (Red Hat)
66 vulnerabilities.
openssl-devel-engineRed HatOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 Mediumopenssl-devel-engineRed HatASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function5.3 Mediumopenssl-devel-engineRed HatMissing ASN1_TYPE validation in PKCS#12 parsing5.5 Mediumopenssl-devel-engineRed HatNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 Highopenssl-devel-engineRed HatMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 Highopenssl-devel-engineRed HatOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 Highopenssl-devel-engineRed HatUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 Mediumopenssl-devel-engineRed HatHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 Mediumopenssl-devel-engineRed HatTLS 1.3 CompressedCertificate excessive memory allocation5.9 Mediumopenssl-devel-engineRed Hat'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 Mediumopenssl-devel-engineRed HatNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 Mediumopenssl-devel-engineRed HatStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 Highopenssl-devel-engineRed HatImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 Mediumopenssl-devel-engineRed HatOut-of-bounds read in HTTP client no_proxy handling5.9 Mediumopenssl-devel-engineRed HatTiming side-channel in SM2 algorithm on 64 bit ARM5.9 Mediumopenssl-devel-engineRed HatOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Critical