openssl1.0 vulnerabilities (Ubuntu)
61 vulnerabilities.
-
openssl1.0Ubuntu Timing Side-Channel in SM2 Signature Generation 3.7 Low -
openssl1.0Ubuntu Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 5.3 Medium -
openssl1.0Ubuntu Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 3.7 Low -
openssl1.0Ubuntu Excessive Memory Allocation in Relative CRLDP Processing 5.3 Medium -
openssl1.0Ubuntu DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
openssl1.0Ubuntu Heap Buffer Overflow in CMS Key Unwrapping 7.5 High -
openssl1.0Ubuntu Excessive Memory Use Buffering DTLS Records for a Future Epoch 7.5 High -
openssl1.0Ubuntu Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
openssl1.0Ubuntu Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
openssl1.0Ubuntu Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
openssl1.0Ubuntu Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
openssl1.0Ubuntu Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
openssl1.0Ubuntu Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo 7.5 High -
openssl1.0Ubuntu Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo 7.5 High -
openssl1.0Ubuntu NULL Pointer Dereference When Processing a Delta CRL 7.5 High -
openssl1.0Ubuntu Potential Use-after-free in DANE Client Code 8.1 High -
openssl1.0Ubuntu ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function 5.3 Medium -
openssl1.0Ubuntu NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function 7.5 High -
openssl1.0Ubuntu Heap out-of-bounds write in BIO_f_linebuffer on short writes 4.7 Medium -
openssl1.0Ubuntu Out-of-bounds read in HTTP client no_proxy handling 5.9 Medium -
openssl1.0Ubuntu Timing side-channel in SM2 algorithm on 64 bit ARM 5.9 Medium -
openssl1.0Ubuntu Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
openssl1.0Ubuntu Timing side-channel in ECDSA signature computation 4.6 Medium -
openssl1.0Ubuntu Low-level invalid GF(2^m) parameters lead to OOB memory access 8.8 High -
openssl1.0Ubuntu SSL_select_next_proto buffer overread 9.1 Critical -
openssl1.0Ubuntu Unbounded memory growth with session handling in TLSv1.3 5.9 Medium -
openssl1.0Ubuntu PKCS12 Decoding crashes 5.5 Medium -
openssl1.0Ubuntu Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
openssl1.0Ubuntu Excessive time spent checking DH q parameter value 5.3 Medium -
openssl1.0Ubuntu Excessive time spent checking DH keys and parameters 5.3 Medium -
openssl1.0Ubuntu Possible DoS translating ASN.1 object identifiers 6.5 Medium -
openssl1.0Ubuntu Input buffer over-read in AES-XTS implementation on 64 bit ARM 5.9 Medium -
openssl1.0Ubuntu Certificate policy check not enabled 5.3 Medium -
openssl1.0Ubuntu Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
openssl1.0Ubuntu Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
openssl1.0Ubuntu X.400 address type confusion in X.509 GeneralName 7.4 High -
openssl1.0Ubuntu Use-after-free following BIO_new_NDEF 7.5 High -
openssl1.0Ubuntu Timing Oracle in RSA Decryption 5.9 Medium -
openssl1.0Ubuntu X.509 Policy Constraints Double Locking 7.5 High -
openssl1.0Ubuntu The c_rehash script allows command injection 7.3 High -
openssl1.0Ubuntu Resource leakage when decoding certificates and keys 7.5 High -
openssl1.0Ubuntu Incorrect MAC key used in the RC4-MD5 ciphersuite 5.9 Medium -
openssl1.0Ubuntu OCSP_basic_verify may incorrectly verify the response signing certificate 5.3 Medium -
openssl1.0Ubuntu The c_rehash script allows command injection 7.3 High -
openssl1.0Ubuntu Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
openssl1.0Ubuntu Read buffer overruns processing ASN.1 strings 7.4 High -
openssl1.0Ubuntu Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
openssl1.0Ubuntu Integer overflow in CipherUpdate 7.5 High -
openssl1.0Ubuntu EDIPARTYNAME NULL pointer dereference 5.9 Medium -
openssl1.0Ubuntu Raccoon attack 3.7 Low - Show olderLoading…