23954 matches found
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
A flaw was found in OpenSSL's CMSdecrypt and PKCS7decrypt functions. This vulnerability, a Bleichenbacher-style oracle, could allow a remote attacker to decrypt or sign messages using the victim's private RSA key. Exploitation requires the attacker to provide specially crafted CMS or S/MIME...
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax CMS data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key KEK cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leadin...
CVE-2026-34180 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-VM8W-J6FW-JC7R vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-V446-XWFM-X7MR vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-F684-CPCQ-J565 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-7PHF-QPM5-Q6P3 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-5M8F-M8JV-3RP3 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-58MV-QQMV-GQGV vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-45446 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-42764 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-34181 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-42769 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-42765 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-34183 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
GHSA-VC8W-W49C-4JGJ vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...