27928 matches found
MiracleLinux 9 : openssl-3.5.8-1.el9_8.ML.1 (AXSA:2026-1865:17)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1865:17 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...
EulerOS 2.0 SP15 : openssl (EulerOS-SA-2026-3787)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destinationx000D buffer for Unicode output in ASN1mbstringncopy can lead to a heapx000D...
EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3825)
According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow...
Oracle Linux 10 : openssl (ELSA-2026-500326)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500326 advisory. 3.5.8-1.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.8-1 - Rebase to OpenSSL 3.5.8 Resolves...
CLSA-2026-1789474778 openssl: Fix of CVE-2026-31789
CVE-2026-31789: bound the length passed to hextostring so the hex buffer size computation cannot overflow when printing Subject Key Identifier or Authority Key Identifier extensions...
io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration
A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
tomcat: Apache Tomcat: TLS implementations ignore Certificate Revocation Lists
A flaw was found in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM Transport Layer Security TLS implementations fail to properly check Certificate Revocation Lists CRLs when a certificate uses a keystore. This oversight could allow an attacker to use a revoked certificate, potentially leading to...
CLSA-2026-1789551334 openssl: Fix of 2 CVEs
CVE-2026-54874: buffer only a DTLS record's own bytes instead of the whole read buffer, and lower the unprocessed records queue limit, to avoid remote memory exhaustion - CVE-2026-63072: size the CMS key-unwrap output buffer for the AES-WRAP-PAD worst case to prevent an 8-byte out-of-bounds heap...
SUSE-SU-2026:23788-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...
SUSE-SU-2026:23794-1 Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...
Security Bulletin: A vulnerability in OpenSSL affects IBM DevOps Code ClearCase
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM DevOps Code ClearCase. CVE-2026-22796 Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where...
Security Bulletin: A vulnerability in OpenSSL affects IBM DevOps Code ClearCase.
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM DevOps Code ClearCase. CVE-2026-22795 Vulnerability Details CVEID:CVE-2026-22795 DESCRIPTION: Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed...
Security Bulletin: A vulnerability in OpenSSL affects IBM DevOps Code ClearCase
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM DevOps Code ClearCase. CVE-2025-66199 Vulnerability Details CVEID:CVE-2025-66199 DESCRIPTION: Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer...
Security Bulletin: A vulnerability in OpenSSL affects IBM DevOps Code ClearCase
Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project. OpenSSL is used by IBM DevOps Code ClearCase. CVE-2025-11187 Vulnerability Details CVEID:CVE-2025-11187 DESCRIPTION: Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffe...
Security Bulletin: Due to the use of OpenSSL, IBM DevOps Code ClearCase is vulnerable to a denial of Service (CVE-2025-69421, CVE-2025-69419)
Summary OpenSSL is used by IBM DevOps Code ClearCase as part of the secure communication protocols. CVE-2025-69421, CVE-2025-69419 Vulnerability Details CVEID:CVE-2025-69419 DESCRIPTION: Issue summary: Calling PKCS12getfriendlyname function on a maliciously crafted PKCS12 file with a BMPString...
Exploit for Out-of-bounds Read in Openssl
heartbleed-lab A small, self-contained lab for CVE-2014-016...
OpenSSL CMP DoS
The vulnerability of the CMP module in the OpenSSL library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
OpenSSL CMP DoS
The vulnerability of the CMP module in the OpenSSL library is related to the pointer manipulation during the processing of the protectionAlg parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
OpenSSL CMP DoS
The vulnerability of the CMP module in the OpenSSL library is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures...