openssl-3 vulnerabilities (SUSE)
109 vulnerabilities.
openssl-3SUSEPotential Use-after-free in DANE Client Code8.1 Highopenssl-3SUSEOpenSSL TLS 1.3 server may choose unexpected key agreement group6.5 Mediumopenssl-3SUSEASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function5.3 Mediumopenssl-3SUSEMissing ASN1_TYPE validation in PKCS#12 parsing5.5 Mediumopenssl-3SUSENULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function7.5 Highopenssl-3SUSEMissing ASN1_TYPE validation in TS_RESP_verify_response() function7.5 Highopenssl-3SUSEOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 Highopenssl-3SUSEUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 Mediumopenssl-3SUSEHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 Mediumopenssl-3SUSETLS 1.3 CompressedCertificate excessive memory allocation5.9 Mediumopenssl-3SUSE'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 Mediumopenssl-3SUSENULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 Mediumopenssl-3SUSEStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 Highopenssl-3SUSEImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 Mediumopenssl-3SUSEOut-of-bounds read in HTTP client no_proxy handling5.9 Mediumopenssl-3SUSETiming side-channel in SM2 algorithm on 64 bit ARM5.9 Mediumopenssl-3SUSEOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Criticalopenssl-3SUSEOpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack,...5.3 Mediumopenssl-3SUSETiming side-channel in ECDSA signature computation4.6 Mediumopenssl-3SUSERFC7250 handshakes with unauthenticated servers don't abort as expected7.4 Highopenssl-3SUSEPossible denial of service in X.509 name checks7.5 Highopenssl-3SUSEValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 Highopenssl-3SUSESSL_select_next_proto buffer overread9.1 Criticalopenssl-3SUSEUse After Free with SSL_free_buffers9.8 Criticalopenssl-3SUSEExcessive time spent checking DSA keys and parameters5.3 Mediumopenssl-3SUSEUnbounded memory growth with session handling in TLSv1.35.9 Mediumopenssl-3SUSEPKCS12 Decoding crashes5.5 Mediumopenssl-3SUSEExcessive time spent checking invalid RSA public keys5.9 Mediumopenssl-3SUSEPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 Mediumopenssl-3SUSEPython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5 Highopenssl-3SUSEExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-3SUSEIncorrect cipher key & IV length processing7.5 Highopenssl-3SUSEExcessive time spent checking DH q parameter value5.3 Mediumopenssl-3SUSEExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-3SUSEAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-3SUSEPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-3SUSEInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-3SUSECertificate policy check not enabled5.3 Mediumopenssl-3SUSEInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-3SUSEExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-3SUSENULL dereference during PKCS7 data verification7.5 Highopenssl-3SUSEX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-3SUSENULL dereference validating DSA public key7.5 Highopenssl-3SUSEInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-3SUSEUse-after-free following BIO_new_NDEF7.5 Highopenssl-3SUSEDouble free after calling PEM_read_bio_ex7.5 Highopenssl-3SUSETiming Oracle in RSA Decryption5.9 Mediumopenssl-3SUSEX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-3SUSEX.509 Policy Constraints Double Locking7.5 Highopenssl-3SUSEUsing long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from...7.5 High- Show moreLoading…