23997 matches found
GHSA-W42R-PH9F-9X66 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-W9RV-XC8M-CMQP vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-15468 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-66199 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-69418 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-69420 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
CVE-2025-69421 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-5888-36J9-C92P vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-3VQQ-45QG-2XF6 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
GHSA-X77R-97GW-WH89 vulnerabilities
Vulnerabilities for packages: openssl, libcrypto3-2.34...
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...
Important: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated...
Security update for openssl-1_1
This update for openssl-11 fixes the following issues: CVE-2026-22795: Missing ASN1TYPE validation in PKCS12 parsing bsc1256839. CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse function bsc1256837. CVE-2025-69421: NULL Pointer Dereference in PKCS12itemdecryptd2iex function...
SUSE-SU-2026:0331-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: - CVE-2026-22795: Missing ASN1TYPE validation in PKCS12 parsing bsc1256839. - CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse function bsc1256837. - CVE-2025-69421: NULL Pointer Dereference in PKCS12itemdecryptd2iex functi...
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated...
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
A flaw was found in OpenSSL. When an application processes a maliciously crafted PKCS12 file, an attacker can exploit a stack buffer overflow or a NULL pointer dereference. This can lead to a denial of service DoS by crashing the application, and in some cases, may enable arbitrary code execution...
Important: Red Hat Security Advisory: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
