openssl vulnerabilities (Ubuntu)
215 vulnerabilities.
opensslUbuntuResource leakage when decoding certificates and keys7.5 HighopensslUbuntuIncorrect MAC key used in the RC4-MD5 ciphersuite5.9 MediumopensslUbuntuOCSP_basic_verify may incorrectly verify the response signing certificate5.3 MediumopensslUbuntuThe c_rehash script allows command injection7.3 HighopensslUbuntuInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 HighopensslUbuntuInvalid handling of X509_verify_cert() internal errors in libssl7.5 HighopensslUbuntuopenssl regressionNo scoreopensslUbuntuRead buffer overruns processing ASN.1 strings7.4 HighopensslUbuntuSM2 Decryption Buffer Overflow9.8 CriticalopensslUbuntuNULL pointer deref in signature_algorithms processing5.9 MediumopensslUbuntuNull pointer deref in X509_issuer_and_serial_hash()5.9 MediumopensslUbuntuInteger overflow in CipherUpdate7.5 HighopensslUbuntuEDIPARTYNAME NULL pointer dereference5.9 MediumopensslUbuntuRaccoon attack3.7 LowopensslUbuntuSegmentation fault in SSL_check_chain7.5 HighopensslUbuntursaz_512_sqr overflow bug on x86_645.3 MediumopensslUbuntuPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 LowopensslUbuntuFork Protection5.3 MediumopensslUbuntuECDSA remote timing attack4.7 MediumopensslUbuntuChaCha20-Poly1305 with long nonces7.4 HighopensslUbuntu0-byte record padding oracle5.9 MediumopensslUbuntuSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 MediumopensslUbuntuTiming attack against DSA5.9 MediumopensslUbuntuTiming attack against ECDSA signature generation5.9 MediumopensslUbuntuLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...4.7 MediumopensslUbuntuClient DoS due to large DH parameter7.5 HighopensslUbuntuCache timing vulnerability in RSA Key Generation5.9 MediumopensslUbuntuConstructed ASN.1 types with a recursive definition could exceed the stack6.5 MediumopensslUbuntuThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 MediumopensslUbuntuOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 MediumopensslUbuntuThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 MediumopensslUbuntuWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 MediumopensslUbuntuBN_mod_exp may produce incorrect results on x86_645.9 MediumopensslUbuntuTruncated packet could crash via OOB read7.5 HighopensslUbuntuA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 MediumopensslUbuntuThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 MediumopensslUbuntuA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 HighopensslUbuntuopenssl regressionNo scoreopensslUbuntuMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 HighopensslUbuntuThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 MediumopensslUbuntuInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...9.8 CriticalopensslUbuntuThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 HighopensslUbuntuThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 CriticalopensslUbuntuThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...7.5 HighopensslUbuntuThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...7.5 HighopensslUbuntuThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighopensslUbuntuThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...7.5 HighopensslUbuntuThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 MediumopensslUbuntuOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 CriticalopensslUbuntuThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...9.8 Critical- Show moreLoading…