Improper Access Control

openssl is vulnerable to improper access control. The vulnerability exists in evpmdinitinternal and evpcipherinitinternal functions of digest.c and evpenc.c respectively which allows an attacker to incorrectly pass NIDundef as this value in the call to EVPCIPHERmethnew...

The vulnerability of the EVP_EncodeUpdate function (crypto/evp/evp_enc.c) in the OpenSSL library, related to an error in processing a number, allows a perpetrator to trigger a service failure.

The vulnerability of the EVPEncodeUpdate function crypto/evp/evpenc.c in the OpenSSL library is related to an error in processing numbers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...