openssl-devel vulnerabilities (TuxCare)
81 vulnerabilities.
openssl-develTuxCarePHP is vulnerable to the Marvin Attack5.9 Mediumopenssl-develTuxCareExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-develTuxCareIncorrect cipher key & IV length processing7.5 Highopenssl-develTuxCareExcessive time spent checking DH q parameter value5.3 Mediumopenssl-develTuxCareExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-develTuxCareAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-develTuxCarePossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-develTuxCareCertificate policy check not enabled5.3 Mediumopenssl-develTuxCareExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-develTuxCareX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-develTuxCareUse-after-free following BIO_new_NDEF7.5 Highopenssl-develTuxCareDouble free after calling PEM_read_bio_ex7.5 Highopenssl-develTuxCareTiming Oracle in RSA Decryption5.9 Mediumopenssl-develTuxCareX.509 Policy Constraints Double Locking7.5 Highopenssl-develTuxCareAES OCB fails to encrypt some bytes5.3 Mediumopenssl-develTuxCareThe c_rehash script allows command injection7.3 Highopenssl-develTuxCareThe c_rehash script allows command injection7.3 Highopenssl-develTuxCareInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highopenssl-develTuxCareUpdate of opensslNo scoreopenssl-develTuxCareUpdate of openssl-static, openssl-perl, openssl-devel, openssl, openssl-devel, opensslNo scoreopenssl-develTuxCareRead buffer overruns processing ASN.1 strings7.4 Highopenssl-develTuxCareSM2 Decryption Buffer Overflow9.8 Criticalopenssl-develTuxCareNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumopenssl-develTuxCareInteger overflow in CipherUpdate7.5 Highopenssl-develTuxCareEDIPARTYNAME NULL pointer dereference5.9 Mediumopenssl-develTuxCarePadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowopenssl-develTuxCareECDSA remote timing attack4.7 Mediumopenssl-develTuxCareTiming attack against DSA5.9 Mediumopenssl-develTuxCareClient DoS due to large DH parameter7.5 Highopenssl-develTuxCareCache timing vulnerability in RSA Key Generation5.9 Mediumopenssl-develTuxCareConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Medium