Security
فارسی
All products

Red Hat Enterprise Linux 9/compat-openssl11

Red Hat · Package
60 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Null pointer dereference in PKCS12 parsingCVE-2024-0727 · GHSA-9V9H-CGJ8-H64PVersion ranges need review. cryptographyRed Hat Enterprise Linux 6/openssl PyPIRed Hat Medium Fix reported
openssl-src subject to Timing Oracle in RSA DecryptionCVE-2022-4304 · GHSA-P52G-CM5J-MJV4Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/openssl Rust / CargoRed Hat Medium Fix reported
openssl-src contains Double free after calling `PEM_read_bio_ex`CVE-2022-4450 · GHSA-V5W6-WCM8-JM4QVersion ranges need review. openssl-srcRed Hat Enterprise Linux 9/compat-openssl11 Rust / CargoRed Hat High Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
AES OCB fails to encrypt some bytesCVE-2022-2097 · GHSA-3WX7-46CH-7RQ2Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/ovmf Rust / CargoRed Hat High Fix reported
openssl: c_rehash script allows command injectionCVE-2022-1292 Red Hat Enterprise Linux 6/openssl098eRed Hat Enterprise Linux 6/openssl Red Hat Medium No fix reported
openssl: the c_rehash script allows command injectionCVE-2022-2068 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8Red Hat Enterprise Linux 6/openssl098e Red Hat Medium No fix reported
openssl: Denial of service by excessive resource usage in verifying X509 policy constraintsCVE-2023-0464 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Certificate policy check not enabledCVE-2023-0466 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Invalid certificate policies in leaf certificates are silently ignoredCVE-2023-0465 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Possible DoS translating ASN.1 object identifiersCVE-2023-2650 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Excessive time spent checking DH keys and parametersCVE-2023-3446 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
OpenSSL: Excessive time spent checking DH q parameter valueCVE-2023-3817 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slowCVE-2023-5678 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Unbounded memory growth with session handling in TLSv1.3CVE-2024-2511 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 8/compat-openssl10 Red Hat Low No fix reported
openssl: Use After Free with SSL_free_buffersCVE-2024-4741 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: SSL_select_next_proto buffer overreadCVE-2024-5535 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculationsCVE-2024-41996 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verificationCVE-2026-22796 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/shim-unsigned-aarch64 Red Hat Low No fix reported