openssl-static vulnerabilities (Red Hat)
108 vulnerabilities.
-
openssl-staticRed Hat Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
openssl-staticRed Hat Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
openssl-staticRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
openssl-staticRed Hat SSL_select_next_proto buffer overread 9.1 Critical -
openssl-staticRed Hat X.400 address type confusion in X.509 GeneralName 7.4 High -
openssl-staticRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
openssl-staticRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
openssl-staticRed Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
openssl-staticRed Hat Integer overflow in CipherUpdate 7.5 High -
openssl-staticRed Hat EDIPARTYNAME NULL pointer dereference 5.9 Medium -
openssl-staticRed Hat 0-byte record padding oracle 5.9 Medium -
openssl-staticRed Hat Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
openssl-staticRed Hat Timing attack against DSA 5.9 Medium -
openssl-staticRed Hat Timing attack against ECDSA signature generation 5.9 Medium -
openssl-staticRed Hat Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA... 4.7 Medium -
openssl-staticRed Hat Client DoS due to large DH parameter 7.5 High -
openssl-staticRed Hat Cache timing vulnerability in RSA Key Generation 5.9 Medium -
openssl-staticRed Hat Constructed ASN.1 types with a recursive definition could exceed the stack 6.5 Medium -
openssl-staticRed Hat There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation... 5.9 Medium -
openssl-staticRed Hat OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent... 5.9 Medium -
openssl-staticRed Hat There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... 6.5 Medium -
openssl-staticRed Hat While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one... 5.3 Medium -
openssl-staticRed Hat Truncated packet could crash via OOB read 7.5 High -
openssl-staticRed Hat A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium -
openssl-staticRed Hat A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... 7.5 High -
openssl-staticRed Hat Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
openssl-staticRed Hat The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... 5.9 Medium -
openssl-staticRed Hat The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... 7.5 High -
openssl-staticRed Hat The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... 9.8 Critical -
openssl-staticRed Hat The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use... 7.5 High -
openssl-staticRed Hat The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue... 7.5 High -
openssl-staticRed Hat The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
openssl-staticRed Hat The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time... 7.5 High -
openssl-staticRed Hat The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly... 5.5 Medium -
openssl-staticRed Hat OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which... 9.8 Critical -
openssl-staticRed Hat The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers... 9.8 Critical -
openssl-staticRed Hat The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider... 5.9 Medium -
openssl-staticRed Hat Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0... 7.5 High -
openssl-staticRed Hat Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t... 7.5 High -
openssl-staticRed Hat The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in... 7.5 High -
openssl-staticRed Hat An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2... 5.9 Medium -
openssl-staticRed Hat The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9... 5.9 Medium -
openssl-staticRed Hat The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before... 9.8 Critical -
openssl-staticRed Hat The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,... 5.9 Medium -
openssl-staticRed Hat The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0... 9.8 Critical -
openssl-staticRed Hat Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote... 7.5 High -
openssl-staticRed Hat The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s... 5.1 Medium -
openssl-staticRed Hat Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1... 9.8 Critical -
openssl-staticRed Hat ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of... 5.9 Medium -
openssl-staticRed Hat Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... 5.9 Medium - Show olderLoading…