23988 matches found
K000159898: OpenSSL vulnerability CVE-2025-11187
Security Advisory Description Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cau...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Note: This advisory is applicable to Amazon Linux 2 - Nitro-enclaves Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and this FAQ sectio...
Amazon Linux 2023 : aws-nitro-enclaves-cli, aws-nitro-enclaves-cli-devel, aws-nitro-enclaves-cli-integration-tests (ALAS2023-2026-1371)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1371 advisory. openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that...
Amazon Linux 2 : aws-nitro-enclaves-cli, --advisory ALAS2NITRO-ENCLAVES-2026-086 (ALASNITRO-ENCLAVES-2026-086)
The version of aws-nitro-enclaves-cli installed on the remote host is prior to 1.4.4-0. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-086 advisory. openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Tenable has extracted...
Medium: aws-nitro-enclaves-cli
Issue Overview: openssl: rust-openssl Use-After-Free in Md::fetch and Cipher::fetch CVE-2025-3416 Affected Packages: aws-nitro-enclaves-cli Issue Correction: Run dnf update aws-nitro-enclaves-cli --releasever 2023.10.20260202 or dnf update --advisory ALAS2023-2026-1371 --releasever 2023.10.202602...
Important: openssl
Issue Overview: A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption...
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1406)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1406 advisory. A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector ...
openSUSE 16 Security Update : openssl-3 (openSUSE-SU-2026:20152-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20152-1 advisory. Security fixes: - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS12 MAC verification bsc1256829. - CVE-2025-15467: Stack buffer...
The vulnerability of the PKCS12_get_friendlyname() function in the OpenSSL library, which allows a hacker to trigger a denial-of-service attack
The vulnerability of the PKCS12getfriendlyname function in the OpenSSL library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of the BIO_f_linebuffer() function in the OpenSSL library, which allows a hacker to cause a service failure
The vulnerability of the BIOflinebuffer function in the OpenSSL library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the PKCS7_digest_from_attributes() function in the OpenSSL library allows a hacker to induce a service failure.
The vulnerability of the PKCS7digestfromattributes function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the PKCS12_item_decrypt_d2i_ex() function in the OpenSSL library allows a hacker to trigger a denial-of-service attack.
The vulnerability of the PKCS12itemdecryptd2iex function in the OpenSSL library is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the TS_RESP_verify_response() function in the OpenSSL library allows a hacker to induce a service failure.
The vulnerability of the TSRESPverifyresponse function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Photon OS 4.0: Openssl PHSA-2026-4.0-0952
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0952. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-22796 affecting package openssl for versions less than 3.3.5-3
CVE-2026-22796 affecting package openssl for versions less than 3.3.5-3. A patched version of the package is available...
CVE-2026-22795 affecting package openssl for versions less than 3.3.5-3
CVE-2026-22795 affecting package openssl for versions less than 3.3.5-3. A patched version of the package is available...
CVE-2025-69419 affecting package openssl for versions less than 3.3.5-3
CVE-2025-69419 affecting package openssl for versions less than 3.3.5-3. A patched version of the package is available...
K000159868: OpenSSL vulnerability CVE-2025-15467
Security Advisory Description Issue summary: Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsi...
