Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
•added 2026/01/28 9:06 a.m.•28 views

openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

A flaw was found in openssl. When a user signs or verifies files larger than 16MB using the openssl dgst command with one-shot algorithms, the tool silently truncates the input to 16MB. This creates an integrity gap, allowing trailing data beyond the initial 16MB to be modified without detection...

5.7AI score0.00202EPSS
SaveExploits1References4
OpenSSL
OpenSSL
•added 2026/01/27 12:00 a.m.•11 views

'openssl dgst' one-shot codepath silently truncates inputs >16MB

Issue summary: The ‘openssl dgst’ command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms such as Ed25519, Ed448, or ML-DSA m...

5.5CVSS6.7AI score0.00202EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder