openssl-devel vulnerabilities (Red Hat)
240 vulnerabilities.
openssl-develRed HatOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 Mediumopenssl-develRed HatASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function5.3 Mediumopenssl-develRed HatMissing ASN1_TYPE validation in PKCS#12 parsing5.5 Mediumopenssl-develRed HatNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 Highopenssl-develRed HatMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 Highopenssl-develRed HatOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 Highopenssl-develRed HatUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 Mediumopenssl-develRed HatHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 Mediumopenssl-develRed HatTLS 1.3 CompressedCertificate excessive memory allocation5.9 Mediumopenssl-develRed Hat'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 Mediumopenssl-develRed HatNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 Mediumopenssl-develRed HatStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 Highopenssl-develRed HatImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 Mediumopenssl-develRed HatOut-of-bounds read in HTTP client no_proxy handling5.9 Mediumopenssl-develRed HatTiming side-channel in SM2 algorithm on 64 bit ARM5.9 Mediumopenssl-develRed HatOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Criticalopenssl-develRed HatRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 Highopenssl-develRed HatPossible denial of service in X.509 name checks7.5 Highopenssl-develRed HatSSL_select_next_proto buffer overread9.1 Criticalopenssl-develRed HatUse After Free with SSL_free_buffers9.8 Criticalopenssl-develRed HatExcessive time spent checking DSA keys and parameters5.3 Mediumopenssl-develRed HatUnbounded memory growth with session handling in TLSv1.35.9 Mediumopenssl-develRed HatPKCS12 Decoding crashes5.5 Mediumopenssl-develRed HatExcessive time spent checking invalid RSA public keys5.9 Mediumopenssl-develRed HatPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 Mediumopenssl-develRed HatPHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-develRed HatExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-develRed HatIncorrect cipher key & IV length processing7.5 Highopenssl-develRed HatExcessive time spent checking DH q parameter value5.3 Mediumopenssl-develRed HatExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-develRed HatAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-develRed HatPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-develRed HatInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-develRed HatCertificate policy check not enabled5.3 Mediumopenssl-develRed HatInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-develRed HatExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-develRed HatNULL dereference during PKCS7 data verification7.5 Highopenssl-develRed HatX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-develRed HatNULL dereference validating DSA public key7.5 Highopenssl-develRed HatInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-develRed HatUse-after-free following BIO_new_NDEF7.5 Highopenssl-develRed HatDouble free after calling PEM_read_bio_ex7.5 Highopenssl-develRed HatTiming Oracle in RSA Decryption5.9 Mediumopenssl-develRed HatX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-develRed HatX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-develRed HatX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-develRed HatUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-develRed HatAES OCB fails to encrypt some bytes5.3 Mediumopenssl-develRed HatThe c_rehash script allows command injection7.3 Highopenssl-develRed HatResource leakage when decoding certificates and keys7.5 High- Show moreLoading…