27916 matches found
SUSE SLES16 Security Update : openssl-3 (SUSE-SU-2026:20223-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20223-1 advisory. Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS12 MAC verification bsc1256829. - CVE-2025-15467...
K000159898: OpenSSL vulnerability CVE-2025-11187
Security Advisory Description Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cau...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Issue Correction: Run dnf update aws-nitro-enclaves-cli --releasever 2023.10.20260202 or dnf update --advisory ALAS2023-2026-1371 --releasever 2023.10.202602...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Important: openssl
Issue Overview: A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption...
Amazon Linux 2023 : aws-nitro-enclaves-cli, aws-nitro-enclaves-cli-devel, aws-nitro-enclaves-cli-integration-tests (ALAS2023-2026-1371)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1371 advisory. openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that...
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1406)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1406 advisory. A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector ...
Amazon Linux 2 : aws-nitro-enclaves-cli, --advisory ALAS2NITRO-ENCLAVES-2026-086 (ALASNITRO-ENCLAVES-2026-086)
The version of aws-nitro-enclaves-cli installed on the remote host is prior to 1.4.4-0. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-086 advisory. openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Tenable has extracted...
OpenSSL TLS 1.3 Compression DoS
The vulnerability of the maxcertlist compression parameter in TLS 1.3 of the OpenSSL library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service failures...
OpenSSL TS_RESP_verify_response Function DoS
The vulnerability of the TSRESPverifyresponse function in the OpenSSL library is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
OpenSSL BIO_f_linebuffer Heap Buffer Overflow DoS
The vulnerability of the BIOflinebuffer function in the OpenSSL library is related to the situation where the operation’s output goes beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
openssl dgst Data Compromise
The vulnerability of the command-line tool openssl dgst from the OpenSSL library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker to influence the integrity of the protected information...
OpenSSL PKCS7_digest_from_attributes Function DoS
The vulnerability of the PKCS7digestfromattributes function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
OpenSSL PKCS12_item_decrypt_d2i_ex DoS
The vulnerability of the PKCS12itemdecryptd2iex function in the OpenSSL library is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
OpenSSL PKCS12_get_friendlyname DoS
The vulnerability of the PKCS12getfriendlyname function in the OpenSSL library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
openSUSE 16 Security Update : openssl-3 (openSUSE-SU-2026:20152-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20152-1 advisory. Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS12 MAC verification bsc1256829. - CVE-2025-15467: Stack buffer...
Photon OS 4.0: Openssl PHSA-2026-4.0-0952
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0952. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-22796 affecting package openssl for versions less than 3.3.5-3
CVE-2026-22796 affecting package openssl for versions less than 3.3.5-3. A patched version of the package is available...