openssl-3 vulnerabilities (openSUSE)
108 vulnerabilities.
openssl-3openSUSEHeap out-of-bounds write in BIO_f_linebuffer on short writes4.7 Mediumopenssl-3openSUSETLS 1.3 CompressedCertificate excessive memory allocation5.9 Mediumopenssl-3openSUSE'openssl dgst' one-shot codepath silently truncates inputs >16MB5.5 Mediumopenssl-3openSUSENULL dereference in SSL_CIPHER_find() function on unknown cipher ID5.9 Mediumopenssl-3openSUSEStack buffer overflow in CMS (Auth)EnvelopedData parsing8.8 Highopenssl-3openSUSEImproper validation of PBMAC1 parameters in PKCS#12 MAC verification6.1 Mediumopenssl-3openSUSEOut-of-bounds read in HTTP client no_proxy handling5.9 Mediumopenssl-3openSUSETiming side-channel in SM2 algorithm on 64 bit ARM5.9 Mediumopenssl-3openSUSEOut-of-bounds read & write in RFC 3211 KEK Unwrap9.8 Criticalopenssl-3openSUSEThe x509 application adds trusted use instead of rejected use6.5 Mediumopenssl-3openSUSEOpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack,...5.3 Mediumopenssl-3openSUSETiming side-channel in ECDSA signature computation4.6 Mediumopenssl-3openSUSELow-level invalid GF(2^m) parameters lead to OOB memory access8.8 Highopenssl-3openSUSERFC7250 handshakes with unauthenticated servers don't abort as expected7.4 Highopenssl-3openSUSEPossible denial of service in X.509 name checks7.5 Highopenssl-3openSUSEValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 Highopenssl-3openSUSESSL_select_next_proto buffer overread9.1 Criticalopenssl-3openSUSEUse After Free with SSL_free_buffers9.8 Criticalopenssl-3openSUSEExcessive time spent checking DSA keys and parameters5.3 Mediumopenssl-3openSUSEUnbounded memory growth with session handling in TLSv1.35.9 Mediumopenssl-3openSUSEPKCS12 Decoding crashes5.5 Mediumopenssl-3openSUSEExcessive time spent checking invalid RSA public keys5.9 Mediumopenssl-3openSUSEPOLY1305 MAC implementation corrupts vector registers on PowerPC6.5 Mediumopenssl-3openSUSEPython-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-256597.5 Highopenssl-3openSUSEExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumopenssl-3openSUSEIncorrect cipher key & IV length processing7.5 Highopenssl-3openSUSEPOLY1305 MAC implementation corrupts XMM registers on Windows7.8 Highopenssl-3openSUSEExcessive time spent checking DH q parameter value5.3 Mediumopenssl-3openSUSEExcessive time spent checking DH keys and parameters5.3 Mediumopenssl-3openSUSEAES-SIV implementation ignores empty associated data entries5.3 Mediumopenssl-3openSUSEPossible DoS translating ASN.1 object identifiers6.5 Mediumopenssl-3openSUSEInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Mediumopenssl-3openSUSECertificate policy check not enabled5.3 Mediumopenssl-3openSUSEInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumopenssl-3openSUSEExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highopenssl-3openSUSENULL dereference during PKCS7 data verification7.5 Highopenssl-3openSUSEX.400 address type confusion in X.509 GeneralName7.4 Highopenssl-3openSUSENULL dereference validating DSA public key7.5 Highopenssl-3openSUSEInvalid pointer dereference in d2i_PKCS7 functions7.5 Highopenssl-3openSUSEUse-after-free following BIO_new_NDEF7.5 Highopenssl-3openSUSEDouble free after calling PEM_read_bio_ex7.5 Highopenssl-3openSUSETiming Oracle in RSA Decryption5.9 Mediumopenssl-3openSUSEX.509 Name Constraints Read Buffer Overflow4.9 Mediumopenssl-3openSUSEX.509 Policy Constraints Double Locking7.5 Highopenssl-3openSUSEUsing long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from...7.5 Highopenssl-3openSUSEX.509 Email Address Variable Length Buffer Overflow7.5 Highopenssl-3openSUSEX.509 Email Address 4-byte Buffer Overflow7.5 Highopenssl-3openSUSEUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 Highopenssl-3openSUSEAES OCB fails to encrypt some bytes5.3 Mediumopenssl-3openSUSERSA implementation bug in AVX512IFMA instructions9.8 Critical- Show moreLoading…