GHSA-W853-V86G-GV7J vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-GXHG-7JX8-M22J vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-3CXM-476W-GHM2 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips-3.6.0, openssl, libcrypto3-2.34, openssl-provider-fips-3.1.2, openssl-provider-fips...

CVE-2026-7383 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-F9V2-4W9P-2CWC vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42768 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42767 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-35188 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-45445 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42766 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-34182 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-45447 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...

openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

A flaw was found in OpenSSL. The implementations of AES-SIV Advanced Encryption Standard - SIV and AES-GCM-SIV Advanced Encryption Standard - Galois/Counter Mode - SIV incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages...

openssl: Possible NULL Dereference in Password-Based CMS Decryption

A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax CMS decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...

openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

A flaw was found in OpenSSL. When processing attacker-supplied Cryptographic Message Syntax CMS data using password-based decryption, an attacker can choose a stream-mode Key Encryption Key KEK cipher. This can trigger a heap out-of-bounds read, potentially causing an application crash and leadin...