openssl vulnerabilities (SUSE)
86 vulnerabilities.
-
opensslSUSE NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
opensslSUSE CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
opensslSUSE Timing side-channel in SM2 algorithm on 64 bit ARM 5.9 Medium -
opensslSUSE Timing side-channel in ECDSA signature computation 4.6 Medium -
opensslSUSE PKCS12 Decoding crashes 5.5 Medium -
opensslSUSE Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
opensslSUSE Excessive time spent checking DH q parameter value 5.3 Medium -
opensslSUSE Excessive time spent checking DH keys and parameters 5.3 Medium -
opensslSUSE Possible DoS translating ASN.1 object identifiers 6.5 Medium -
opensslSUSE Certificate policy check not enabled 5.3 Medium -
opensslSUSE Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
opensslSUSE Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
opensslSUSE X.400 address type confusion in X.509 GeneralName 7.4 High -
opensslSUSE Use-after-free following BIO_new_NDEF 7.5 High -
opensslSUSE Timing Oracle in RSA Decryption 5.9 Medium -
opensslSUSE The c_rehash script allows command injection 7.3 High -
opensslSUSE The c_rehash script allows command injection 7.3 High -
opensslSUSE Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
opensslSUSE Read buffer overruns processing ASN.1 strings 7.4 High -
opensslSUSE Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
opensslSUSE Integer overflow in CipherUpdate 7.5 High -
opensslSUSE EDIPARTYNAME NULL pointer dereference 5.9 Medium -
opensslSUSE Raccoon attack 3.7 Low -
opensslSUSE Security update for openssl No score -
opensslSUSE Security update for openssl No score -
opensslSUSE rsaz_512_sqr overflow bug on x86_64 5.3 Medium -
opensslSUSE Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 3.7 Low -
opensslSUSE ECDSA remote timing attack 4.7 Medium -
opensslSUSE Security update for openssl No score -
opensslSUSE Security update for openssl No score -
opensslSUSE 0-byte record padding oracle 5.9 Medium -
opensslSUSE Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
opensslSUSE Timing attack against DSA 5.9 Medium -
opensslSUSE Client DoS due to large DH parameter 7.5 High -
opensslSUSE Cache timing vulnerability in RSA Key Generation 5.9 Medium -
opensslSUSE Constructed ASN.1 types with a recursive definition could exceed the stack 6.5 Medium -
opensslSUSE There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation... 5.9 Medium -
opensslSUSE OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent... 5.9 Medium -
opensslSUSE There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... 6.5 Medium -
opensslSUSE While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one... 5.3 Medium -
opensslSUSE BN_mod_exp may produce incorrect results on x86_64 5.9 Medium -
opensslSUSE Truncated packet could crash via OOB read 7.5 High -
opensslSUSE A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium -
opensslSUSE There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in... 5.9 Medium -
opensslSUSE A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... 7.5 High -
opensslSUSE Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
opensslSUSE The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... 5.9 Medium -
opensslSUSE Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0... 9.8 Critical -
opensslSUSE The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... 7.5 High -
opensslSUSE The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... 9.8 Critical - Show olderLoading…