openssl-src vulnerabilities (crates.io)
26 vulnerabilities.
-
openssl-srccrates.io NULL dereference during PKCS7 data verification 7.5 High -
openssl-srccrates.io X.400 address type confusion in X.509 GeneralName 7.4 High -
openssl-srccrates.io NULL dereference validating DSA public key 7.5 High -
openssl-srccrates.io Invalid pointer dereference in d2i_PKCS7 functions 7.5 High -
openssl-srccrates.io Use-after-free following BIO_new_NDEF 7.5 High -
openssl-srccrates.io Double free after calling PEM_read_bio_ex 7.5 High -
openssl-srccrates.io Timing Oracle in RSA Decryption 5.9 Medium -
openssl-srccrates.io X.509 Name Constraints Read Buffer Overflow 4.9 Medium -
openssl-srccrates.io X.509 Policy Constraints Double Locking 7.5 High -
openssl-srccrates.io X.509 Email Address Variable Length Buffer Overflow 7.5 High -
openssl-srccrates.io X.509 Email Address 4-byte Buffer Overflow 7.5 High -
openssl-srccrates.io Using a Custom Cipher with NID_undef may lead to NULL encryption 7.5 High -
openssl-srccrates.io AES OCB fails to encrypt some bytes 5.3 Medium -
openssl-srccrates.io RSA implementation bug in AVX512IFMA instructions 9.8 Critical -
openssl-srccrates.io Resource leakage when decoding certificates and keys 7.5 High -
openssl-srccrates.io Incorrect MAC key used in the RC4-MD5 ciphersuite 5.9 Medium -
openssl-srccrates.io OCSP_basic_verify may incorrectly verify the response signing certificate 5.3 Medium -
openssl-srccrates.io Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
openssl-srccrates.io Invalid handling of X509_verify_cert() internal errors in libssl 7.5 High -
openssl-srccrates.io Read buffer overruns processing ASN.1 strings 7.4 High -
openssl-srccrates.io SM2 Decryption Buffer Overflow 9.8 Critical -
openssl-srccrates.io CA certificate check bypass with X509_V_FLAG_X509_STRICT 7.4 High -
openssl-srccrates.io NULL pointer deref in signature_algorithms processing 5.9 Medium -
openssl-srccrates.io Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
openssl-srccrates.io Integer overflow in CipherUpdate 7.5 High -
openssl-srccrates.io Segmentation fault in SSL_check_chain 7.5 High