openssl vulnerabilities (Red Hat)
240 vulnerabilities.
opensslRed HatThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...5.1 MediumopensslRed HatDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...9.8 CriticalopensslRed Hatssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of...5.9 MediumopensslRed HatMozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2...5.9 MediumopensslRed Hatssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...4.3 MediumopensslRed HatThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...5.3 MediumopensslRed Hatcrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...7.5 HighopensslRed HatThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,...7.5 HighopensslRed HatMemory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1...5.0 MediumopensslRed HatThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...4.3 MediumopensslRed HatRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...6.8 MediumopensslRed HatThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...6.8 MediumopensslRed HatThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...4.3 MediumopensslRed HatRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...4.0 MediumopensslRed HatThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...7.5 HighopensslRed HatThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...4.3 MediumopensslRed HatThe DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f...5.8 MediumopensslRed HatThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...4.3 MediumopensslRed HatRace condition in a certain Red Hat patch to the PRNG lock implementation in the...4.3 MediumopensslRed HatThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...5.0 MediumopensslRed HatRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...6.8 MediumopensslRed HatUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...6.8 MediumopensslRed HatOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...5.0 MediumopensslRed HatMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...7.1 HighopensslRed HatMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...7.1 HighopensslRed HatThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 MediumopensslRed HatMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...5.0 MediumopensslRed Hatd1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...5.0 MediumopensslRed HatDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...5.0 MediumopensslRed HatThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...4.3 MediumopensslRed HatThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 LowopensslRed HatThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...3.7 LowopensslRed HatThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...5.0 MediumopensslRed HatThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...7.5 HighopensslRed HatThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...5.0 MediumopensslRed HatInteger underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...7.5 HighopensslRed HatThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...5.0 MediumopensslRed HatThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 MediumopensslRed HatThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 MediumopensslRed HatThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...5.0 MediumopensslRed HatThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...5.0 MediumopensslRed HatThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...4.3 MediumopensslRed HatOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...5.0 MediumopensslRed HatThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...5.0 MediumopensslRed HatThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...5.0 MediumopensslRed HatThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 MediumopensslRed HatThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...4.3 MediumopensslRed HatOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...7.4 HighopensslRed HatThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 LowopensslRed HatOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...5.0 Medium- Show moreLoading…