openssl-1_1 vulnerabilities (openSUSE)
167 vulnerabilities.
openssl-1_1openSUSERace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...6.8 Mediumopenssl-1_1openSUSEThe BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e...4.3 Mediumopenssl-1_1openSUSEUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...6.8 Mediumopenssl-1_1openSUSEOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...5.0 Mediumopenssl-1_1openSUSEMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...7.1 Highopenssl-1_1openSUSEMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...7.1 Highopenssl-1_1openSUSEThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 Mediumopenssl-1_1openSUSEMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...5.0 Mediumopenssl-1_1openSUSEd1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...5.0 Mediumopenssl-1_1openSUSEDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...5.0 Mediumopenssl-1_1openSUSEThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...4.3 Mediumopenssl-1_1openSUSEThe Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap...1.9 Lowopenssl-1_1openSUSEcrypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2...5.0 Mediumopenssl-1_1openSUSEThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other...2.6 Lowopenssl-1_1openSUSEThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...5.0 Mediumopenssl-1_1openSUSEThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...7.5 Highopenssl-1_1openSUSEThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...5.0 Mediumopenssl-1_1openSUSEThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...5.0 Mediumopenssl-1_1openSUSEThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 Mediumopenssl-1_1openSUSEThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...5.0 Mediumopenssl-1_1openSUSEThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...5.0 Mediumopenssl-1_1openSUSEThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...5.0 Mediumopenssl-1_1openSUSEThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...4.3 Mediumopenssl-1_1openSUSEOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...5.0 Mediumopenssl-1_1openSUSEThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...5.0 Mediumopenssl-1_1openSUSEThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...5.0 Mediumopenssl-1_1openSUSEOpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce...4.3 Mediumopenssl-1_1openSUSEThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...4.3 Mediumopenssl-1_1openSUSEThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...4.3 Mediumopenssl-1_1openSUSEOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...7.4 Highopenssl-1_1openSUSEThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...2.6 Lowopenssl-1_1openSUSEOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...5.0 Mediumopenssl-1_1openSUSEThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1...7.5 Highopenssl-1_1openSUSEThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...5.0 Mediumopenssl-1_1openSUSEThe implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and...5.0 Mediumopenssl-1_1openSUSEThe mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote...5.0 Mediumopenssl-1_1openSUSEOpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote...5.0 Mediumopenssl-1_1openSUSEThe GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...5.0 Mediumopenssl-1_1openSUSEThe Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f...5.0 Mediumopenssl-1_1openSUSEOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...4.3 Mediumopenssl-1_1openSUSEThe SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly...5.0 Mediumopenssl-1_1openSUSEThe DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only...4.3 Mediumopenssl-1_1openSUSEcrypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure...5.0 Mediumopenssl-1_1openSUSEssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to...5.0 Mediumopenssl-1_1openSUSEMultiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...7.6 Highopenssl-1_1openSUSEDouble free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl...4.3 Mediumopenssl-1_1openSUSERSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a,...6.4 Mediumopenssl-1_1openSUSEThe Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before...7.5 Highopenssl-1_1openSUSEThe ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote...5.0 Mediumopenssl-1_1openSUSEThe dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2...5.0 Medium- Show moreLoading…