openssl vulnerabilities (Red Hat)
240 vulnerabilities.
opensslRed HatOCSP_basic_verify may incorrectly verify the response signing certificate5.3 MediumopensslRed HatThe c_rehash script allows command injection7.3 HighopensslRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslRed HatRead buffer overruns processing ASN.1 strings7.4 HighopensslRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 HighopensslRed HatNULL pointer deref in signature_algorithms processing5.9 MediumopensslRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 MediumopensslRed HatInteger overflow in CipherUpdate7.5 HighopensslRed HatEDIPARTYNAME NULL pointer dereference5.9 MediumopensslRed Hatrsaz_512_sqr overflow bug on x86_645.3 MediumopensslRed HatPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LowopensslRed HatFork Protection5.3 MediumopensslRed HatECDSA remote timing attack4.7 MediumopensslRed HatChaCha20-Poly1305 with long nonces7.4 HighopensslRed Hat0-byte record padding oracle5.9 MediumopensslRed HatSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 MediumopensslRed HatTiming attack against DSA5.9 MediumopensslRed HatTiming attack against ECDSA signature generation5.9 MediumopensslRed HatLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 MediumopensslRed HatClient DoS due to large DH parameter7.5 HighopensslRed HatCache timing vulnerability in RSA Key Generation5.9 MediumopensslRed HatConstructed ASN.1 types with a recursive definition could exceed the stack6.5 MediumopensslRed HatThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumopensslRed HatOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 MediumopensslRed HatThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumopensslRed HatWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumopensslRed HatTruncated packet could crash via OOB read7.5 HighopensslRed HatA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 MediumopensslRed HatA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 HighopensslRed HatMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighopensslRed HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumopensslRed HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 HighopensslRed HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 CriticalopensslRed HatThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 HighopensslRed HatThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 HighopensslRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighopensslRed HatThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 HighopensslRed HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 MediumopensslRed HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 CriticalopensslRed HatThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...9.8 CriticalopensslRed HatThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...5.9 MediumopensslRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 HighopensslRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 HighopensslRed HatThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 HighopensslRed HatAn oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2...5.9 MediumopensslRed HatThe get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9...5.9 MediumopensslRed HatThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...9.8 CriticalopensslRed HatThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 MediumopensslRed HatThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...9.8 CriticalopensslRed HatMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...7.5 High- Show moreLoading…