openssl1 vulnerabilities (SUSE)
64 vulnerabilities.
-
openssl1SUSE ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
openssl1SUSE NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
openssl1SUSE Missing ASN1_TYPE validation in TS_RESP_verify_response() function 7.5 High -
openssl1SUSE Heap out-of-bounds write in BIO_f_linebuffer on short writes 4.7 Medium -
openssl1SUSE Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
openssl1SUSE SSL_select_next_proto buffer overread 9.1 Critical -
openssl1SUSE PKCS12 Decoding crashes 5.5 Medium -
openssl1SUSE Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
openssl1SUSE Excessive time spent checking DH keys and parameters 5.3 Medium -
openssl1SUSE Possible DoS translating ASN.1 object identifiers 6.5 Medium -
openssl1SUSE Certificate policy check not enabled 5.3 Medium -
openssl1SUSE Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
openssl1SUSE Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
openssl1SUSE X.400 address type confusion in X.509 GeneralName 7.4 High -
openssl1SUSE Use-after-free following BIO_new_NDEF 7.5 High -
openssl1SUSE Timing Oracle in RSA Decryption 5.9 Medium -
openssl1SUSE Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
openssl1SUSE Read buffer overruns processing ASN.1 strings 7.4 High -
openssl1SUSE Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
openssl1SUSE Integer overflow in CipherUpdate 7.5 High -
openssl1SUSE EDIPARTYNAME NULL pointer dereference 5.9 Medium -
openssl1SUSE Raccoon attack 3.7 Low -
openssl1SUSE Security update for openssl1 No score -
openssl1SUSE Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 3.7 Low -
openssl1SUSE ECDSA remote timing attack 4.7 Medium -
openssl1SUSE 0-byte record padding oracle 5.9 Medium -
openssl1SUSE Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... 4.7 Medium -
openssl1SUSE Timing attack against DSA 5.9 Medium -
openssl1SUSE Client DoS due to large DH parameter 7.5 High -
openssl1SUSE Cache timing vulnerability in RSA Key Generation 5.9 Medium -
openssl1SUSE Constructed ASN.1 types with a recursive definition could exceed the stack 6.5 Medium -
openssl1SUSE While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one... 5.3 Medium -
openssl1SUSE Truncated packet could crash via OOB read 7.5 High -
openssl1SUSE A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium -
openssl1SUSE A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... 7.5 High -
openssl1SUSE Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before... 7.5 High -
openssl1SUSE The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... 5.9 Medium -
openssl1SUSE Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0... 9.8 Critical -
openssl1SUSE The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... 7.5 High -
openssl1SUSE The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... 9.8 Critical -
openssl1SUSE The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use... 7.5 High -
openssl1SUSE The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue... 7.5 High -
openssl1SUSE The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High -
openssl1SUSE The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time... 7.5 High -
openssl1SUSE The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly... 5.5 Medium -
openssl1SUSE OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which... 9.8 Critical -
openssl1SUSE The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers... 9.8 Critical -
openssl1SUSE The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider... 5.9 Medium -
openssl1SUSE Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0... 7.5 High -
openssl1SUSE Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t... 7.5 High - Show olderLoading…