ChaCha20-Poly1305 cipher in OpenSSL allows a variable nonce length, leading to potential confidentiality and integrity attacks
Reporter | Title | Published | Views | Family All 98 |
---|---|---|---|---|
![]() | Vulnerability in OpenSSL - ChaCha20-Poly1305 with long nonces | 6 Mar 201900:00 | – | openssl |
![]() | EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-1327) | 6 May 201900:00 | – | nessus |
![]() | openSUSE Security Update : openssl-1_1 (openSUSE-2019-1147) | 5 Apr 201900:00 | – | nessus |
![]() | OpenSSL 1.1.1 < 1.1.1c Vulnerability | 3 Jun 201900:00 | – | nessus |
![]() | EulerOS 2.0 SP3 : openssl110f (EulerOS-SA-2019-1328) | 6 May 201900:00 | – | nessus |
![]() | FreeBSD : OpenSSL -- ChaCha20-Poly1305 nonce vulnerability (e56f2f7c-410e-11e9-b95c-b499baebfeaf) | 8 Mar 201900:00 | – | nessus |
![]() | SUSE SLED15 / SLES15 Security Update : openssl-1_1 (SUSE-SU-2019:0678-1) | 25 Mar 201900:00 | – | nessus |
![]() | SUSE SLED12 / SLES12 Security Update : openssl-1_1 (SUSE-SU-2019:0787-1) | 29 Mar 201900:00 | – | nessus |
![]() | Debian DSA-4475-1 : openssl - security update | 2 Jul 201900:00 | – | nessus |
![]() | OpenSSL 1.1.0 < 1.1.0k Vulnerability | 3 Jun 201900:00 | – | nessus |
[
{
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"status": "affected",
"version": "Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b)"
},
{
"status": "affected",
"version": "Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j)"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo