All products

Red Hat Enterprise Linux 8/compat-openssl10

Red Hat · Package
51 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Null pointer dereference in PKCS12 parsingCVE-2024-0727 · GHSA-9V9H-CGJ8-H64PVersion ranges need review. cryptographyRed Hat Enterprise Linux 6/openssl PyPIRed Hat Medium Fix reported
openssl-src subject to Timing Oracle in RSA DecryptionCVE-2022-4304 · GHSA-P52G-CM5J-MJV4Version ranges need review. openssl-srcRed Hat Enterprise Linux 7/openssl Rust / CargoRed Hat Medium Fix reported
openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2023-0215 · GHSA-R7JW-WP68-3XCHVersion ranges need review. openssl-srcRed Hat Enterprise Linux 6/openssl Rust / CargoRed Hat High Fix reported
Read buffer overruns processing ASN.1 stringsCVE-2021-3712 · GHSA-Q9WJ-F4QW-6VFJVersion ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8 Rust / CargoRed Hat High Fix reported
Integer Overflow in openssl-srcCVE-2021-23841 · GHSA-84RM-QF37-FGC2Version ranges need review. openssl-srcRed Hat Advanced Cluster Management for Kubernetes 2/management-ingress Rust / CargoRed Hat Medium Fix reported
openssl: timing side channel attack in the DSA signature algorithmCVE-2018-0734 Red Hat Enterprise Linux 6/openssl098eRed Hat Enterprise Linux 6/openssl Red Hat Low No fix reported
openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)CVE-2018-5407 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Medium No fix reported
openssl: 0-byte record padding oracleCVE-2019-1559 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Medium No fix reported
openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkeyCVE-2019-1563 Red Hat Enterprise Linux 5/opensslRed Hat Enterprise Linux 6/openssl Red Hat Low No fix reported
openssl: side-channel weak encryption vulnerabilityCVE-2019-1547 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Integer overflow in RSAZ modular exponentiation on x86_64CVE-2019-1551 Red Hat Enterprise Linux 7/opensslRed Hat Enterprise Linux 8/compat-openssl10 Red Hat Low No fix reported
openssl: Information exposure when DH secret are reused across multiple TLS connectionsCVE-2020-1968 Red Hat Enterprise Linux 5/openssl097aRed Hat Enterprise Linux 5/openssl Red Hat Low No fix reported
openssl: EDIPARTYNAME NULL pointer de-referenceCVE-2020-1971 Red Hat Enterprise Linux 5/opensslRed Hat Enterprise Linux 8/compat-openssl10 Red Hat High No fix reported
openssl: c_rehash script allows command injectionCVE-2022-1292 Red Hat Enterprise Linux 6/openssl098eRed Hat Enterprise Linux 6/openssl Red Hat Medium No fix reported
openssl: the c_rehash script allows command injectionCVE-2022-2068 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/management-ingress-rhel8Red Hat Enterprise Linux 6/openssl098e Red Hat Medium No fix reported
openssl: Denial of service by excessive resource usage in verifying X509 policy constraintsCVE-2023-0464 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Certificate policy check not enabledCVE-2023-0466 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Invalid certificate policies in leaf certificates are silently ignoredCVE-2023-0465 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported
openssl: Possible DoS translating ASN.1 object identifiersCVE-2023-2650 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Medium No fix reported
openssl: Excessive time spent checking DH keys and parametersCVE-2023-3446 Red Hat Enterprise Linux 6/opensslRed Hat Enterprise Linux 7/openssl Red Hat Low No fix reported