openssl-static vulnerabilities (Red Hat)
109 vulnerabilities.
openssl-staticRed Hatssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 Mediumopenssl-staticRed HatThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...5.3 Mediumopenssl-staticRed Hatcrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...7.5 Highopenssl-staticRed HatThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,...7.5 Highopenssl-staticRed HatMemory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1...5.0 Mediumopenssl-staticRed HatThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...4.3 Mediumopenssl-staticRed HatRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 Mediumopenssl-staticRed HatThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...6.8 Mediumopenssl-staticRed HatThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...4.3 Mediumopenssl-staticRed HatRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 Mediumopenssl-staticRed HatThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...7.5 Highopenssl-staticRed HatThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...4.3 Mediumopenssl-staticRed HatThe DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f...5.8 Mediumopenssl-staticRed HatThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...4.3 Mediumopenssl-staticRed HatRace condition in a certain Red Hat patch to the PRNG lock implementation in the...4.3 Mediumopenssl-staticRed HatThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...5.0 Mediumopenssl-staticRed HatRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...6.8 Mediumopenssl-staticRed HatUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...6.8 Mediumopenssl-staticRed HatOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...5.0 Mediumopenssl-staticRed HatMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...7.1 Highopenssl-staticRed HatMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...7.1 Highopenssl-staticRed HatThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 Mediumopenssl-staticRed HatMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...5.0 Mediumopenssl-staticRed Hatd1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...5.0 Mediumopenssl-staticRed HatDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...5.0 Mediumopenssl-staticRed HatThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...4.3 Mediumopenssl-staticRed HatThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 Lowopenssl-staticRed HatThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...3.7 Lowopenssl-staticRed HatThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...5.0 Mediumopenssl-staticRed HatThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...7.5 Highopenssl-staticRed HatThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...5.0 Mediumopenssl-staticRed HatInteger underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...7.5 Highopenssl-staticRed HatThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...5.0 Mediumopenssl-staticRed HatThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 Mediumopenssl-staticRed HatThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 Mediumopenssl-staticRed HatThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...5.0 Mediumopenssl-staticRed HatThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...5.0 Mediumopenssl-staticRed HatThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...4.3 Mediumopenssl-staticRed HatOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...5.0 Mediumopenssl-staticRed HatThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...5.0 Mediumopenssl-staticRed HatThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...5.0 Mediumopenssl-staticRed HatThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 Mediumopenssl-staticRed HatThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...4.3 Mediumopenssl-staticRed HatOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...7.4 Highopenssl-staticRed HatThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 Lowopenssl-staticRed HatOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...5.0 Mediumopenssl-staticRed HatInteger underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...6.8 Mediumopenssl-staticRed HatThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1...7.5 Highopenssl-staticRed HatThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...5.0 Mediumopenssl-staticRed HatThe implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and...5.0 Medium- Show moreLoading…