wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in wc_AesCbcEncrypt

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4637109640364032 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

PT-2022-6154

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.0 through 3.0.5 Description The issue arises from the incorrect handling of legacy custom ciphers in OpenSSL versions 3.0.0 to 3.0.5. When an application uses the deprecated EVP CIPHER meth new function with NID undef, the...

CVE-2022-39829

There is a NULL pointer dereference in aes256encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVPCIPHERCTXnew...

cryptofuzz:cryptofuzz-openssl: Heap-buffer-overflow in SipHash_Final

Project: https://github.com/guidovranken/cryptofuzz.git Detailed Report: https://oss-fuzz.com/testcase?key=5908141251887104 Project: cryptofuzz Fuzzing Engine: honggfuzz Fuzz Target: cryptofuzz-openssl Job Type: honggfuzzasancryptofuzz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

AlmaLinux 8 : openssl (ALSA-2021:4424)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4424 advisory. - Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in AesGcmCryptUpdate_C

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4934317875265536 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in wc_Des_CbcEncrypt

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4747580341354496 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash...

GHSA-84RM-QF37-FGC2 Integer Overflow in openssl-src

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

DEBIAN-CVE-2021-3711

In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2021-2044)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial...

EulerOS 2.0 SP9 : openssl (EulerOS-SA-2021-1956)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data...

EulerOS 2.0 SP9 : openssl (EulerOS-SA-2021-1935)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data...

EulerOS 2.0 SP5 : openssl111d (EulerOS-SA-2021-1909)

According to the versions of the openssl111d packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input lengt...

USN-4738-1: OpenSSL vulnerabilities

Paul Kehrer discovered that OpenSSL incorrectly handled certain input lengths in EVP functions. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2021-23840 Tavis Ormandy discovered that OpenSSL incorrectly handled parsing issuer...

Integer overflow in CipherUpdate

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

OpenSSL -- Multiple vulnerabilities

The OpenSSL project reports: Null pointer deref in X509issuerandserialhash CVE-2021-23841Moderate The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to...

wolfssl:cryptofuzz-openssl-api: Heap-buffer-overflow in AES_GCM_encrypt_C

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5682542969749504 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-api Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 16 Crash...

PT-2020-21809

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type known as Bad-free, which occurs during the cleanup process of aes gcm. The crash state involves the functions EVP CIPH...

PT-2020-22209

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the cipher generic initiv and cipher generic init internal functions, specifically in the...

The vulnerability of the EVP_EncodeUpdate function (crypto/evp/evp_enc.c) in the OpenSSL library, related to an error in processing a number, allows a perpetrator to trigger a service failure.

The vulnerability of the EVPEncodeUpdate function crypto/evp/evpenc.c in the OpenSSL library is related to an error in processing numbers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...