1634 matches found
EulerOS Virtualization 2.13.0 : openssl (EulerOS-SA-2026-2412)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can...
CVE-2026-28390 vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-VGXX-5XJ5-Q97X vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-GXHG-7JX8-M22J vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-28386 vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-H2CC-WX97-XP8V vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-Q457-VX59-3FQG vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-42769 vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-5M8F-M8JV-3RP3 vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-5PG7-F6XV-J6M4 vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: openssl...
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface EVPCipher will have their provided Initialization Vector IV silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the...
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
A flaw was found in the Certificate Management Protocol CMP implementation within OpenSSL. An attacker with existing Registration Authority RA level credentials could exploit an error in the certificate verification process during a Root Certificate Authority CA key update. This vulnerability...
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...
CVE-2026-34180 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-45446 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-RPJ2-P5PJ-R33V vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-V446-XWFM-X7MR vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...