libressl vulnerabilities (openSUSE)
33 vulnerabilities.
-
libresslopenSUSE Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
libresslopenSUSE Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause... 7.5 High -
libresslopenSUSE Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to... 9.8 Critical -
libresslopenSUSE LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and... 4.7 Medium -
libresslopenSUSE The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2... 7.4 High -
libresslopenSUSE The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s... 5.1 Medium -
libresslopenSUSE The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0... 5.3 Medium -
libresslopenSUSE crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote... 7.5 High -
libresslopenSUSE Apache Cordova Android before 3.5.1 allows remote attackers to open and send data to arbitrary... 4.3 Medium -
libresslopenSUSE The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,... 7.5 High -
libresslopenSUSE Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1... 5.0 Medium -
libresslopenSUSE The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL... 4.3 Medium -
libresslopenSUSE Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1... 7.5 High -
libresslopenSUSE The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in... 4.3 Medium -
libresslopenSUSE Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1... 6.8 Medium -
libresslopenSUSE The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0... 5.0 Medium -
libresslopenSUSE The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e... 4.3 Medium -
libresslopenSUSE Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL... 6.8 Medium -
libresslopenSUSE The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0... 4.3 Medium -
libresslopenSUSE Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before... 5.0 Medium -
libresslopenSUSE d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1... 5.0 Medium -
libresslopenSUSE The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on... 3.7 Low -
libresslopenSUSE The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1... 5.0 Medium -
libresslopenSUSE The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0... 7.5 High -
libresslopenSUSE The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,... 5.0 Medium -
libresslopenSUSE The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1... 5.0 Medium -
libresslopenSUSE The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1... 5.0 Medium -
libresslopenSUSE The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r... 5.0 Medium -
libresslopenSUSE The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1... 5.0 Medium -
libresslopenSUSE OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain... 5.0 Medium -
libresslopenSUSE The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,... 5.0 Medium -
libresslopenSUSE The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k... 5.0 Medium -
libresslopenSUSE The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0... 4.3 Medium