1 matches found
AZL-90087 CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3
Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface, the application-supplied initialisation vector IV is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce regardless of the IV...
7.5CVSS6.8AI score0.00603EPSS
SaveExploits0References1
20