openssl vulnerabilities (Ubuntu)
215 vulnerabilities.
opensslUbuntuOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversion7.4 HighopensslUbuntuUnauthenticated/unencrypted trailing bytes with low-level OCB function calls4.0 MediumopensslUbuntuHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 MediumopensslUbuntuTLS 1.3 CompressedCertificate excessive memory allocation5.9 MediumopensslUbuntu'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 MediumopensslUbuntuNULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 MediumopensslUbuntuStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 HighopensslUbuntuImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 MediumopensslUbuntuOut-of-bounds read in HTTP client no_proxy handling5.9 MediumopensslUbuntuTiming side-channel in SM2 algorithm on 64 bit ARM5.9 MediumopensslUbuntuOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 CriticalopensslUbuntuopenssl vulnerabilitiesNo scoreopensslUbuntuTiming side-channel in ECDSA signature computation4.6 MediumopensslUbuntuLow-level invalid GF(2^m) parameters lead to OOB memory access8.8 HighopensslUbuntuPossible denial of service in X.509 name checks7.5 HighopensslUbuntuSSL_select_next_proto buffer overread9.1 CriticalopensslUbuntuUse After Free with SSL_free_buffers9.8 CriticalopensslUbuntuopenssl updateNo scoreopensslUbuntuExcessive time spent checking DSA keys and parameters5.3 MediumopensslUbuntuUnbounded memory growth with session handling in TLSv1.35.9 MediumopensslUbuntuopenssl updateNo scoreopensslUbuntuopenssl updateNo scoreopensslUbuntuPKCS12 Decoding crashes5.5 MediumopensslUbuntuExcessive time spent checking invalid RSA public keys5.9 MediumopensslUbuntuPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 MediumopensslUbuntuExcessive time spent in DH check / generation with large Q parameter value5.3 MediumopensslUbuntuIncorrect cipher key & IV length processing7.5 HighopensslUbuntuExcessive time spent checking DH q parameter value5.3 MediumopensslUbuntuExcessive time spent checking DH keys and parameters5.3 MediumopensslUbuntuAES-SIV implementation ignores empty associated data entries5.3 MediumopensslUbuntuPossible DoS translating ASN.1 object identifiers6.5 MediumopensslUbuntuInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 MediumopensslUbuntuCertificate policy check not enabled5.3 MediumopensslUbuntuInvalid certificate policies in leaf certificates are silently ignored5.3 MediumopensslUbuntuExcessive Resource Usage Verifying X.509 Policy Constraints7.5 HighopensslUbuntuNULL dereference during PKCS7 data verification7.5 HighopensslUbuntuX.400 address type confusion in X.509 GeneralName7.4 HighopensslUbuntuNULL dereference validating DSA public key7.5 HighopensslUbuntuInvalid pointer dereference in d2i_PKCS7 functions7.5 HighopensslUbuntuUse-after-free following BIO_new_NDEF7.5 HighopensslUbuntuDouble free after calling PEM_read_bio_ex7.5 HighopensslUbuntuTiming Oracle in RSA Decryption5.9 MediumopensslUbuntuX.509 Name Constraints Read Buffer Overflow4.9 MediumopensslUbuntuX.509 Policy Constraints Double Locking7.5 HighopensslUbuntuUsing long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from...7.5 HighopensslUbuntuX.509 Email Address Variable Length Buffer Overflow7.5 HighopensslUbuntuX.509 Email Address 4-byte Buffer Overflow7.5 HighopensslUbuntuUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 HighopensslUbuntuAES OCB fails to encrypt some bytes5.3 MediumopensslUbuntuThe c_rehash script allows command injection7.3 High- Show moreLoading…