Security
فارسی
All products

openssl-src

Rust / Cargo · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl-src subject to Timing Oracle in RSA DecryptionCVE-2022-4304 · GHSA-P52G-CM5J-MJV4Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/openssl Rust / CargoRed Hat Medium Fix reported
openssl-src contains Read Buffer Overflow in X.509 Name ConstraintCVE-2022-4203 · GHSA-W67W-MW4J-8QRVVersion ranges need review. openssl-src Rust / Cargo Critical Fix reported
openssl-src contains Double free after calling `PEM_read_bio_ex`CVE-2022-4450 · GHSA-V5W6-WCM8-JM4QVersion ranges need review. openssl-srcRed Hat Enterprise Linux 9/compat-openssl11 Rust / CargoRed Hat High Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
openssl-src subject to NULL dereference validating DSA public keyCVE-2023-0217 · GHSA-VXRH-CPG7-8VJRVersion ranges need review. openssl-src Rust / Cargo High Fix reported
openssl-src contains `NULL` dereference during PKCS7 data verificationCVE-2023-0401 · GHSA-VRH7-X64V-7VXQVersion ranges need review. openssl-src Rust / Cargo High Fix reported
Vulnerable OpenSSL included in cryptography wheelsCVE-2023-0286 · GHSA-X4QR-2FVF-3MR5Version ranges need review. openssl-srccryptography Rust / CargoPyPIRed Hat High Fix reported
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functionsCVE-2023-0216 · GHSA-29XX-HCV2-C4CPVersion ranges need review. openssl-src Rust / Cargo High Fix reported
Denial of service by double-checked locking in openssl-srcCVE-2022-3996 · GHSA-VR8J-HGMM-JH9R openssl-src Rust / Cargo High Fix reported
Using a Custom Cipher with `NID_undef` may lead to NULL encryptionCVE-2022-3358 · GHSA-4F63-89W9-3JJVVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
AES OCB fails to encrypt some bytesCVE-2022-2097 · GHSA-3WX7-46CH-7RQ2Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/ovmf Rust / CargoRed Hat High Fix reported
Incorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434 · GHSA-638M-M8MH-7GW2Version ranges need review. openssl-src Rust / Cargo Medium Fix reported
`OCSP_basic_verify` may incorrectly verify the response signing certificateCVE-2022-1343 · GHSA-MFM6-R9G2-Q4R7Version ranges need review. openssl-src Rust / Cargo Medium Fix reported
Resource leakage when decoding certificates and keysCVE-2022-1473 · GHSA-G323-FR93-4J3CVersion ranges need review. openssl-src Rust / Cargo High Fix reported
Null pointer deference in openssl-src CVE-2020-1967 · GHSA-JQ65-29V4-4X35Version ranges need review. openssl-src Rust / Cargo High Fix reported
Read buffer overruns processing ASN.1 stringsCVE-2021-3712 · GHSA-Q9WJ-F4QW-6VFJVersion ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8 Rust / CargoRed Hat High Fix reported
X.509 Email Address 4-byte Buffer OverflowCVE-2022-3602 · GHSA-8RWR-X37P-MX23Version ranges need review. openssl-src Rust / Cargo Critical Fix reported
openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificatesCVE-2022-0778 · GHSA-X3MH-JVJW-3XWXVersion ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8 Rust / CargoRed Hat High Fix reported
Certificate check bypass in openssl-srcCVE-2021-3450 · GHSA-8HFJ-XRJ2-PM22Version ranges need review. openssl-src Rust / Cargo High Fix reported
X.509 Email Address Variable Length Buffer OverflowCVE-2022-3786 · GHSA-H8JM-2X53-XHP5Version ranges need review. openssl-src Rust / Cargo High Fix reported