CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...

OpenSSL -- Command injection vulnerability

The OpenSSL project reports: Circumstances where the crehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review...

CVE-2021-43085

Removed by vendor...

Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM® SDK for Node.js™ in IBM Bluemix

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by IBM SDK for Node.js. IBM SDK for Node.js has addressed the applicable CVEs including the "DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. Vulnerability Details...

Security Advisory 0024

Security Advisory 0024 PDF Date: October 4th, 2016 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | October 4th, 2016 | Initial release Arista Products vulnerability report for security vulnerabilities announcement from the OpenSSL project on September 22nd, 2016 Product: EOS and...

OpenSSL Receives Funding for Developers, Will Undergo Security Audit

Scarcely a month after announcing the formation of a group designed to help fund open source projects, the Core Infrastructure Initiative has decided to provide the OpenSSL Project with enough money to hire two full-time developers and also will fund an audit of OpenSSL by the Open Crypto Audit...

FreeBSD Security Advisory (FreeBSD-SA-09:04.bind.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-09:04.bind.asc SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-06:23.openssl.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:23.openssl.asc ADV FreeBSD-SA-06:23.openssl.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...