rootio-openssl vulnerabilities (Root)
26 vulnerabilities.
-
rootio-opensslRoot DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
rootio-opensslRoot Invalid Pointer Dereference in CMP Server via Crafted protectionAlg 7.5 High -
rootio-opensslRoot Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
rootio-opensslRoot Excessive Memory Use Buffering DTLS Records for a Future Epoch 7.5 High -
rootio-opensslRoot AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
rootio-opensslRoot Unbounded Memory Growth in QUIC Server Incoming Channel Queue 7.5 High -
rootio-opensslRoot Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
rootio-opensslRoot Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
rootio-opensslRoot Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
rootio-opensslRoot AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
rootio-opensslRoot CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
rootio-opensslRoot Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
rootio-opensslRoot Incorrect Failure Handling in RSA KEM RSASVE Encapsulation 7.5 High -
rootio-opensslRoot Heap Buffer Overflow in Hexadecimal Conversion 9.8 Critical -
rootio-opensslRoot Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
rootio-opensslRoot Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
rootio-opensslRoot NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
rootio-opensslRoot Potential Use-after-free in DANE Client Code 8.1 High -
rootio-opensslRoot NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
rootio-opensslRoot Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
rootio-opensslRoot Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
rootio-opensslRoot Unauthenticated/unencrypted trailing bytes with low-level OCB function calls 4.0 Medium -
rootio-opensslRoot Out-of-bounds read & write in RFC 3211 KEK Unwrap 7.5 High -
rootio-opensslRoot RFC7250 handshakes with unauthenticated servers don't abort as expected 6.3 Medium -
rootio-opensslRoot SSL_select_next_proto buffer overread 9.1 Critical -
rootio-opensslRoot Use After Free with SSL_free_buffers 7.5 High