external_boringssl_openssl_1.1.0g_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson 保留所有权利。 描述 OpenSSL 项目是一个协作开发项目，旨在构建一个健壮、商业级、功能齐全的开源工具包，该工具包实现了传输层安全（TLS）协议（包括 SSLv3），同时也是一个全强度的通用密码库。 OpenSSL 源自 Eric A. Young 和 Tim J. Hudson 开发的 SSLeay 库。OpenSSL...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2. November 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Alle Rechte vorbehalten. BESCHREIBUNG Das OpenSSL-Projekt ist eine gemeinschaftliche Initiative zur Entwicklung einer robusten, kommerziell nutzbaren, voll funktionsfähigen...

SUSE CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2021-1506)

According to the version of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result ...

EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2021-1221)

According to the version of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared...

openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

Constructed ASN.1 types with a recursive definition such as can be found in PKCS7 could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so...

OpenSSL Multiple Vulnerabilities (Nov 2017) - Linux

OpenSSL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

OpenSSL Multiple Vulnerabilities (Nov 2017) - Windows

OpenSSL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

PT-2017-3948

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.2m OpenSSL versions prior to 1.1.0g Description The issue is related to a carry propagating bug in the x86 64 Montgomery squaring procedure. This bug may allow a remote attacker to gain unauthorized access to...

OpenSSL 'OOB read' Security Bypass Vulnerability - Windows

OpenSSL is prone to an SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

ALPINE-CVE-2017-3735

While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...