openssl-libs vulnerabilities (Red Hat)
193 vulnerabilities.
openssl-libsRed HatOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Mediumopenssl-libsRed HatThe c_rehash script allows command injection7.3 Highopenssl-libsRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highopenssl-libsRed HatRead buffer overruns processing ASN.1 strings7.4 Highopenssl-libsRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highopenssl-libsRed HatNULL pointer deref in signature_algorithms processing5.9 Mediumopenssl-libsRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumopenssl-libsRed HatInteger overflow in CipherUpdate7.5 Highopenssl-libsRed HatEDIPARTYNAME NULL pointer dereference5.9 Mediumopenssl-libsRed Hatrsaz_512_sqr overflow bug on x86_645.3 Mediumopenssl-libsRed HatPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowopenssl-libsRed HatFork Protection5.3 Mediumopenssl-libsRed HatECDSA remote timing attack4.7 Mediumopenssl-libsRed HatChaCha20-Poly1305 with long nonces7.4 Highopenssl-libsRed Hat0-byte record padding oracle5.9 Mediumopenssl-libsRed HatSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Mediumopenssl-libsRed HatTiming attack against DSA5.9 Mediumopenssl-libsRed HatTiming attack against ECDSA signature generation5.9 Mediumopenssl-libsRed HatLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 Mediumopenssl-libsRed HatClient DoS due to large DH parameter7.5 Highopenssl-libsRed HatCache timing vulnerability in RSA Key Generation5.9 Mediumopenssl-libsRed HatConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Mediumopenssl-libsRed HatThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediumopenssl-libsRed HatOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 Mediumopenssl-libsRed HatThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediumopenssl-libsRed HatWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Mediumopenssl-libsRed HatTruncated packet could crash via OOB read7.5 Highopenssl-libsRed HatA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 Mediumopenssl-libsRed HatA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 Highopenssl-libsRed HatMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 Highopenssl-libsRed HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Mediumopenssl-libsRed HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 Highopenssl-libsRed HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 Criticalopenssl-libsRed HatThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 Highopenssl-libsRed HatThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 Highopenssl-libsRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 Highopenssl-libsRed HatThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 Highopenssl-libsRed HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Mediumopenssl-libsRed HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 Criticalopenssl-libsRed HatThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...9.8 Criticalopenssl-libsRed HatThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 Mediumopenssl-libsRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 Highopenssl-libsRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 Highopenssl-libsRed HatThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 Highopenssl-libsRed HatAn oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2...5.9 Mediumopenssl-libsRed HatThe get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9...5.9 Mediumopenssl-libsRed HatThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...9.8 Criticalopenssl-libsRed HatThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 Mediumopenssl-libsRed HatThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...9.8 Criticalopenssl-libsRed HatMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...7.5 High- Show moreLoading…