openssl vulnerabilities (Red Hat)
240 vulnerabilities.
opensslRed HatOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 MediumopensslRed HatASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function5.3 MediumopensslRed HatMissing ASN1_TYPE validation in PKCS#12 parsing5.5 MediumopensslRed HatNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 HighopensslRed HatMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 HighopensslRed HatOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 HighopensslRed HatUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumopensslRed HatHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumopensslRed HatTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumopensslRed Hat'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslRed HatNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslRed HatStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslRed HatImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslRed HatOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslRed HatTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslRed HatOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslRed HatRFC7250 handshakes with unauthenticated servers don't abort as expected7.4 HighopensslRed HatPossible denial of service in X.509 name checks7.5 HighopensslRed HatSSL_select_next_proto buffer overread9.1 CriticalopensslRed HatUse After Free with SSL_free_buffers9.8 CriticalopensslRed HatExcessive time spent checking DSA keys and parameters5.3 MediumopensslRed HatUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslRed HatPKCS12 Decoding crashes5.5 MediumopensslRed HatExcessive time spent checking invalid RSA public keys5.9 MediumopensslRed HatPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslRed HatPHP is vulnerable to the Marvin Attack5.9 MediumopensslRed HatExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslRed HatIncorrect cipher key & IV length processing7.5 HighopensslRed HatExcessive time spent checking DH q parameter value5.3 MediumopensslRed HatExcessive time spent checking DH keys and parameters5.3 MediumopensslRed HatAES-SIV implementation ignores empty associated data entries5.3 MediumopensslRed HatPossible DoS translating ASN.1 object identifiers6.5 MediumopensslRed HatInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 MediumopensslRed HatCertificate policy check not enabled5.3 MediumopensslRed HatInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslRed HatExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslRed HatNULL dereference during PKCS7 data verification7.5 HighopensslRed HatX.400 address type confusion in X.509 GeneralName7.4 HighopensslRed HatNULL dereference validating DSA public key7.5 HighopensslRed HatInvalid pointer dereference in d2i_PKCS7 functions7.5 HighopensslRed HatUse-after-free following BIO_new_NDEF7.5 HighopensslRed HatDouble free after calling PEM_read_bio_ex7.5 HighopensslRed HatTiming Oracle in RSA Decryption5.9 MediumopensslRed HatX.509 Name Constraints Read Buffer Overflow4.9 MediumopensslRed HatX.509 Email Address Variable Length Buffer Overflow7.5 HighopensslRed HatX.509 Email Address 4-byte Buffer Overflow7.5 HighopensslRed HatUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 HighopensslRed HatAES OCB fails to encrypt some bytes5.3 MediumopensslRed HatThe c_rehash script allows command injection7.3 HighopensslRed HatResource leakage when decoding certificates and keys7.5 High- Show moreLoading…