OpenSSL CMSdecrypt DoS

The vulnerability of the CMSdecrypt function in the OpenSSL library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

OpenSSL CMSdecrypt PKCS7decrypt Secret Data Access

The vulnerability of the CMSdecrypt and PKCS7decrypt functions cmsenv.c, cmssmime.c, and pk7doit.c in the OpenSSL library is related to deficiencies in the encryption mechanism for confidential data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...