24380 matches found
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax CMS data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key KEK cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leadin...
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
A flaw was found in OpenSSL's QUIC PATHCHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATHCHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates...
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...
Important: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2026-34180 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-V446-XWFM-X7MR vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-VM8W-J6FW-JC7R vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34181 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-58MV-QQMV-GQGV vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-5M8F-M8JV-3RP3 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-F684-CPCQ-J565 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-42764 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-45446 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-7PHF-QPM5-Q6P3 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-42769 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2026-42770 vulnerabilities
Vulnerabilities for packages: openssl-provider-fips, openssl-provider-fips-3.1.2, openssl, openssl-provider-fips-3.6.0, libcrypto3-2.34...
GHSA-3C8F-QQ7H-7QV6 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...