openssl vulnerabilities (crates.io)
18 vulnerabilities.
-
opensslcrates.io rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 5.1 Medium -
opensslcrates.io rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 5.1 Medium -
opensslcrates.io rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 8.7 High -
opensslcrates.io rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 7.2 High -
opensslcrates.io rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 1.7 Low -
opensslcrates.io rust-openssl: Incorrect bounds assertion in aes key wrap 7.2 High -
opensslcrates.io rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 8.1 High -
opensslcrates.io rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 8.3 High -
opensslcrates.io rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch` 6.3 Medium -
opensslcrates.io rust openssl ssl::select_next_proto use after free 6.3 Medium -
opensslcrates.io openssl's `MemBio::get_buf` has undefined behavior with empty buffers 6.9 Medium -
opensslcrates.io `openssl` `X509StoreRef::objects` is unsound No score -
opensslcrates.io `openssl` `X509VerifyParamRef::set_host` buffer over-read 4.5 Medium -
opensslcrates.io `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read No score -
opensslcrates.io `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference No score -
opensslcrates.io `openssl` `X509NameBuilder::build` returned object is not thread safe No score -
opensslcrates.io Use after free in openssl 9.8 Critical -
opensslcrates.io Improper Certificate Validation in openssl 8.1 High