PT-2019-3786

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2s OpenSSL versions 1.1.0 through 1.1.0k OpenSSL versions 1.1.1 through 1.1.1c Description The issue is related to a padding oracle attack in the PKCS7 dataDecode and CMS decrypt set1 pkey functions, allowing...

PT-2015-1691

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8zg OpenSSL versions prior to 1.0.0s OpenSSL versions prior to 1.0.1n OpenSSL versions prior to 1.0.2b Description The issue is related to the PKCS7 dataDecode function in OpenSSL, which allows remote attackers to...