All products

Red Hat Enterprise Linux 10/openssl

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl: Excessive time spent checking DSA keys and parametersCVE-2024-4603 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculationsCVE-2024-41996 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Out-of-bounds read in HTTP client no_proxy handlingCVE-2025-9232 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authenticationCVE-2026-28387 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processingCVE-2026-28388 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service vulnerability in CMS processingCVE-2026-28389 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processingCVE-2026-31789 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: NULL Dereference in Certificate Verification with OCSP CheckingCVE-2026-42765 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()CVE-2026-42771 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Low No fix reported