Security
فارسی
All products

Red Hat Enterprise Linux 6/openssl

Red Hat · Package
70 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Null pointer dereference in PKCS12 parsingCVE-2024-0727 · GHSA-9V9H-CGJ8-H64PVersion ranges need review. cryptographyRed Hat Enterprise Linux 6/openssl PyPIRed Hat Medium Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
Using a Custom Cipher with `NID_undef` may lead to NULL encryptionCVE-2022-3358 · GHSA-4F63-89W9-3JJVVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
Read buffer overruns processing ASN.1 stringsCVE-2021-3712 · GHSA-Q9WJ-F4QW-6VFJVersion ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8 Rust / CargoRed Hat High Fix reported
Integer Overflow in openssl-srcCVE-2021-23841 · GHSA-84RM-QF37-FGC2Version ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/management-ingress Rust / CargoRed Hat Medium Fix reported
openssl: DoS via repeated SSL session renegotiationsCVE-2011-1473 Red Hat Enterprise Linux 4/openssl096bRed Hat Enterprise Linux 4/openssl Red Hat Low No fix reported
HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)CVE-2011-3389 Red Hat Enterprise Linux 4/gnutlsRed Hat Enterprise Linux 4/java-1.5.0-ibm Red Hat Medium No fix reported
SSL/TLS: Attack against RC4 stream cipherCVE-2013-2566 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipherCVE-2015-2808 Red Hat Enterprise Linux 5/gnutlsRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
openssl: ECDSA P-256 timing attack key recoveryCVE-2016-7056 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Virtualization 3/mingw-virt-viewer Red Hat Medium No fix reported
openssl: Malformed X.509 IPAdressFamily could cause OOB readCVE-2017-3735 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Low No fix reported
openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of serviceCVE-2018-0739 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Medium No fix reported
openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keysCVE-2018-0737 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Low No fix reported
openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hangCVE-2018-0732 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Medium No fix reported
ROHNP: Key Extraction Side Channel in Multiple Crypto LibrariesCVE-2018-0495 CloudForms Management Engine 5/libtomcryptRed Hat Enterprise Linux 5/nss Red Hat Medium No fix reported
openssl: timing side channel attack in the DSA signature algorithmCVE-2018-0734 Red Hat Enterprise Linux 6/openssl098eRed Hat Enterprise Linux 6/openssl Red Hat Low No fix reported
openssl: timing side channel attack in the ECDSA signature generationCVE-2018-0735 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/OVMF Red Hat Low No fix reported
openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)CVE-2018-5407 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Medium No fix reported
openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkeyCVE-2019-1563 Red Hat Enterprise Linux 5/opensslRed Hat Enterprise Linux 6/openssl Red Hat Low No fix reported
openssl: side-channel weak encryption vulnerabilityCVE-2019-1547 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported