openssl vulnerabilities (TuxCare)
83 vulnerabilities.
opensslTuxCarePOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslTuxCarePHP is vulnerable to the Marvin Attack5.9 MediumopensslTuxCareExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslTuxCareIncorrect cipher key & IV length processing7.5 HighopensslTuxCareExcessive time spent checking DH q parameter value5.3 MediumopensslTuxCareExcessive time spent checking DH keys and parameters5.3 MediumopensslTuxCareAES-SIV implementation ignores empty associated data entries5.3 MediumopensslTuxCarePossible DoS translating ASN.1 object identifiers6.5 MediumopensslTuxCareCertificate policy check not enabled5.3 MediumopensslTuxCareExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslTuxCareX.400 address type confusion in X.509 GeneralName7.4 HighopensslTuxCareUse-after-free following BIO_new_NDEF7.5 HighopensslTuxCareDouble free after calling PEM_read_bio_ex7.5 HighopensslTuxCareTiming Oracle in RSA Decryption5.9 MediumopensslTuxCareX.509 Policy Constraints Double Locking7.5 HighopensslTuxCareAES OCB fails to encrypt some bytes5.3 MediumopensslTuxCareThe c_rehash script allows command injection7.3 HighopensslTuxCareResource leakage when decoding certificates and keys7.5 HighopensslTuxCareThe c_rehash script allows command injection7.3 HighopensslTuxCareInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslTuxCareUpdate of opensslNo scoreopensslTuxCareUpdate of openssl-static, openssl-perl, openssl-devel, openssl, openssl-devel, opensslNo scoreopensslTuxCareRead buffer overruns processing ASN.1 strings7.4 HighopensslTuxCareSM2 Decryption Buffer Overflow9.8 CriticalopensslTuxCareNull pointer deref in X509_issuer_and_serial_hash()5.9 MediumopensslTuxCareInteger overflow in CipherUpdate7.5 HighopensslTuxCareEDIPARTYNAME NULL pointer dereference5.9 MediumopensslTuxCarePadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LowopensslTuxCareECDSA remote timing attack4.7 MediumopensslTuxCareTiming attack against DSA5.9 MediumopensslTuxCareClient DoS due to large DH parameter7.5 HighopensslTuxCareCache timing vulnerability in RSA Key Generation5.9 MediumopensslTuxCareConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Medium