aws-nitro-enclaves-cli vulnerabilities (SUSE)
18 vulnerabilities.
-
aws-nitro-enclaves-cliSUSE rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 5.1 Medium -
aws-nitro-enclaves-cliSUSE rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 5.1 Medium -
aws-nitro-enclaves-cliSUSE rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 8.7 High -
aws-nitro-enclaves-cliSUSE rustls-webpki before 0.103.13 Panic via empty BIT STRING 8.7 High -
aws-nitro-enclaves-cliSUSE rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 8.3 High -
aws-nitro-enclaves-cliSUSE rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 8.1 High -
aws-nitro-enclaves-cliSUSE rust-openssl: Incorrect bounds assertion in aes key wrap 7.2 High -
aws-nitro-enclaves-cliSUSE rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 1.7 Low -
aws-nitro-enclaves-cliSUSE rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 7.2 High -
aws-nitro-enclaves-cliSUSE rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass 2.1 Low -
aws-nitro-enclaves-cliSUSE rustls webpki Name Constraints URI Validation Bypass 2.1 Low -
aws-nitro-enclaves-cliSUSE rustls-webpki before 0.103.10 CRL Revocation Check Bypass 5.9 Medium -
aws-nitro-enclaves-cliSUSE time affected by a stack exhaustion denial of service attack 6.8 Medium -
aws-nitro-enclaves-cliSUSE Bytes is vulnerable to integer overflow in BytesMut::reserve 5.5 Medium -
aws-nitro-enclaves-cliSUSE idna accepts Punycode labels that do not produce any non-ASCII when decoded 5.1 Medium -
aws-nitro-enclaves-cliSUSE `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access 5.7 Medium -
aws-nitro-enclaves-cliSUSE Hyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method... 7.5 High -
aws-nitro-enclaves-cliSUSE Regular expression denial of service in Rust's regex crate 7.5 High