PT-2020-22241

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 8 crash type. The crash state involves several functions, including AES wrap key,...

openssl: EVP_EncryptUpdate overflow

An integer overflow flaw, leading to a buffer overflow, was found in the way the EVPEncryptUpdate function of OpenSSL parsed very large amounts of input data. A remote attacker could use this flaw to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of t...

openssl: EVP_EncryptUpdate overflow

An integer overflow flaw, leading to a buffer overflow, was found in the way the EVPEncryptUpdate function of OpenSSL parsed very large amounts of input data. A remote attacker could use this flaw to crash an application using OpenSSL or, possibly, execute arbitrary code with the permissions of t...

PT-2016-3309

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1t OpenSSL versions prior to 1.0.2h Description The issue is related to an integer overflow in the EVP EncryptUpdate function, which can cause a denial of service due to heap memory corruption. This can be exploit...