Security Bulletin: IBM DataPower Gateway potentially vulnerable to Denial of Service (CVE-2022-4450)

Summary IBM has addressed the CVE Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioex function. By sending specially crafted PEM files for...

Oracle Linux 9 : openssl (ELSA-2023-12152)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12152 advisory. - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed...

RHEL 9 : openssl (RHSA-2023:0946)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0946 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

K55102452: TMM vulnerability CVE-2017-6140

Security Advisory Description Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suites may cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms: 2000s, 2200s, 4000s, 4200v,...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1

1.1.1t-alt1 built Feb. 20, 2023 Gleb Fotengauer-Malinovskiy in task 314826 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...

Debian dla-3325 : libssl-dev - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3325 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3325-1 [email protected]...

Fedora: Security Advisory for edk2 (FEDORA-2023-e1ffb79ddf)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

K000132635: OpenSSL vulnerability CVE-2022-4450

Security Advisory Description The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers...

FreeBSD -- Multiple vulnerabilities in OpenSSL

Problem Description: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrect...

CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21

CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...

CVE-2022-4450 affecting package openssl 1.1.1k-16

CVE-2022-4450 affecting package openssl 1.1.1k-16. A patched version of the package is available...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1

1.1.1t-alt1 built Feb. 10, 2023 Gleb Fotengauer-Malinovskiy in task 314825 Feb. 7, 2023 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1t fixes CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304...

CVE-2022-4450

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:31+00:00| seen| https://t.me/cibsecurity/57799 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2024-02-10 10:41:39+00:00| seen| https://t.me/ctinow/182524 2025-02-13 11:00:00+00:00| seen|...

roaring-landmask (=0.4.0) potentially affected by CVE-2022-4450 via openssl-src (=300.0.0+3.0.0)

openssl-src CARGO version =300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask =0.4.0 Source cves: CVE-2022-4450 Source advisory: OSV:GHSA-V5W6-WCM8-JM4Q...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2022-4450 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2022-4450 Source advisory: OSV:GHSA-V5W6-WCM8-JM4Q...

AZL-37892 CVE-2022-4450 affecting package hvloader for versions less than 1.0.1-4

The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data...

CVE-2022-4450 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2022-4450 vulnerabilities

Vulnerabilities for packages: openssl, openssl-provider-fips...

CVE-2022-4450

Summary (CVE-2022-4450): OpenSSL’s PEM_read_bio_ex() and wrappers PEM_read_bio()/PEM_read() are vulnerable. If a PEM file is crafted to trigger a 0-byte payload, PEM_read_bio_ex() may return a failure while its header buffer has already been freed; freeing that buffer again can cause a use-after-...

SUSE: Security Advisory (SUSE-SU-2023:0311-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...