24878 matches found
SUSE CVE-2022-3602
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...
SUSE CVE-2022-4304
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages fo...
SUSE CVE-2022-4450
The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data...
SUSE CVE-2022-32222
A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default path for openssl.cnf that might be accessible under some circumstances to a non-admin user instead of /etc/ssl as was the case in versions prior to the upgrade to OpenSSL 3...
SUSE CVE-2023-0215
The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...
SUSE: Security Advisory (SUSE-SU-2023:0408-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0215 affecting package openssl for versions less than 1.1.1k-21
CVE-2023-0215 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...
CVE-2023-0286 affecting package openssl for versions less than 1.1.1k-21
CVE-2023-0286 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...
CVE-2022-4304 affecting package openssl for versions less than 1.1.1k-21
CVE-2022-4304 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...
CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21
CVE-2022-4450 affecting package openssl for versions less than 1.1.1k-21. A patched version of the package is available...
JSA10591 - 2013-09 Security Bulletin: Pulse Connect Secure and Pulse Policy Secure: Multiple OpenSSL vulnerabilities
Last Modified Date Aug 24, 2026 12:34:45 AM...
JSA10544 - 2012-11 Security Bulletin: Steel-Belted Radius: Multiple OpenSSL Vulnerabilities
Last Modified Date Mar 10, 2023 8:08:33 AM...
JSA10497 - 2012-09: Security, Access, and Acceleration: Security Advisories Released
Last Modified Date Aug 24, 2026 12:34:48 AM...
JSA10569 - 2013-05 Security Bulletin: Steel Belted Radius: OpenSSL vulnerability CVE-2012-2110
Last Modified Date Mar 10, 2023 8:08:38 AM...
SA40003 - [Pulse Secure] July 9th 2015 OpenSSL Security Advisory (CVE-2015-1793)
Last Modified Date Aug 24, 2026 12:34:55 AM...
JSA10396 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - OpenSSL - Incorrect checks for malformed signatures on DSA and ECDSA keys used with SSL/TLS on backend servers. CVE-2008-5077.
Last Modified Date Aug 24, 2026 12:35:02 AM...
SA40001 - [Pulse Secure] OpenSSL security advisory for March 19th, 2015
Last Modified Date Mar 4, 2024 7:41:14 PM...
SA40005 - Details on fixes for OpenSSL Heartbleed issue (CVE-2014-0160)
Last Modified Date Aug 24, 2026 12:35:24 AM...