compat-openssl098 vulnerabilities (SUSE)
70 vulnerabilities.
-
compat-openssl098SUSE PKCS12 Decoding crashes 5.5 Medium -
compat-openssl098SUSE Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
compat-openssl098SUSE Excessive time spent checking DH keys and parameters 5.3 Medium -
compat-openssl098SUSE Possible DoS translating ASN.1 object identifiers 6.5 Medium -
compat-openssl098SUSE Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
compat-openssl098SUSE Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
compat-openssl098SUSE Timing Oracle in RSA Decryption 5.9 Medium -
compat-openssl098SUSE Security update for compat-openssl098 No score -
compat-openssl098SUSE The c_rehash script allows command injection 7.3 High -
compat-openssl098SUSE The c_rehash script allows command injection 7.3 High -
compat-openssl098SUSE Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
compat-openssl098SUSE Read buffer overruns processing ASN.1 strings 7.4 High -
compat-openssl098SUSE Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
compat-openssl098SUSE Integer overflow in CipherUpdate 7.5 High -
compat-openssl098SUSE Raccoon attack 3.7 Low -
compat-openssl098SUSE Security update for compat-openssl098 No score -
compat-openssl098SUSE Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 3.7 Low -
compat-openssl098SUSE ECDSA remote timing attack 4.7 Medium -
compat-openssl098SUSE 0-byte record padding oracle 5.9 Medium -
compat-openssl098SUSE Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
compat-openssl098SUSE Timing attack against DSA 5.9 Medium -
compat-openssl098SUSE Client DoS due to large DH parameter 7.5 High -
compat-openssl098SUSE Cache timing vulnerability in RSA Key Generation 5.9 Medium -
compat-openssl098SUSE Constructed ASN.1 types with a recursive definition could exceed the stack 6.5 Medium -
compat-openssl098SUSE A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium -
compat-openssl098SUSE A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... 7.5 High -
compat-openssl098SUSE Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
compat-openssl098SUSE The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... 5.9 Medium -
compat-openssl098SUSE Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0... 9.8 Critical -
compat-openssl098SUSE The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... 7.5 High -
compat-openssl098SUSE The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... 9.8 Critical -
compat-openssl098SUSE The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use... 7.5 High -
compat-openssl098SUSE The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue... 7.5 High -
compat-openssl098SUSE The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
compat-openssl098SUSE The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly... 5.5 Medium -
compat-openssl098SUSE OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which... 9.8 Critical -
compat-openssl098SUSE The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers... 9.8 Critical -
compat-openssl098SUSE Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0... 7.5 High -
compat-openssl098SUSE Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t... 7.5 High -
compat-openssl098SUSE The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in... 7.5 High -
compat-openssl098SUSE An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2... 5.9 Medium -
compat-openssl098SUSE The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9... 5.9 Medium -
compat-openssl098SUSE The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,... 5.9 Medium -
compat-openssl098SUSE The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0... 9.8 Critical -
compat-openssl098SUSE Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote... 7.5 High -
compat-openssl098SUSE The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s... 5.1 Medium -
compat-openssl098SUSE ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of... 5.9 Medium -
compat-openssl098SUSE The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0... 5.3 Medium -
compat-openssl098SUSE Race condition in a certain Red Hat patch to the PRNG lock implementation in the... 4.3 Medium -
compat-openssl098SUSE The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0... 5.0 Medium - Show olderLoading…