24878 matches found
openssl-src contains `NULL` dereference during PKCS7 data verification
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...
GHSA-X4QR-2FVF-3MR5 vulnerabilities
Vulnerabilities for packages: openssl, mitmproxy...
GHSA-X4QR-2FVF-3MR5 vulnerabilities
Vulnerabilities for packages: openssl-provider-fips, openssl, mitmproxy...
roaring-landmask (0.4.0) potentially affected by CVE-2023-0286 via openssl-src (300.0.0+3.0.0)
openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2023-0286 Source advisory: OSV:GHSA-X4QR-2FVF-3MR5...
Vulnerable OpenSSL included in cryptography wheels
pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8.1-39.0.0 are vulnerable to a security issue. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20221213.txt and...
GHSA-X4QR-2FVF-3MR5 Vulnerable OpenSSL included in cryptography wheels
pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8.1-39.0.0 are vulnerable to a security issue. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20221213.txt and...
AZL-13352 CVE-2023-0215 affecting package openssl for versions less than 1.1.1k-21
The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the...
CVE-2023-0401 vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2023-0215 vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2023-0286 vulnerabilities
Vulnerabilities for packages: openssl, mitmproxy...
CVE-2023-0401 vulnerabilities
Vulnerabilities for packages: openssl-provider-fips, openssl...
CVE-2023-0217
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...
CVE-2023-0401
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...
DEBIAN-CVE-2023-0286
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...
DEBIAN-CVE-2023-0217
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...
CVE-2023-0216 vulnerabilities
Vulnerabilities for packages: openssl-provider-fips, openssl...
CVE-2023-0217 vulnerabilities
Vulnerabilities for packages: openssl...
CVE-2023-0217 vulnerabilities
Vulnerabilities for packages: openssl-provider-fips, openssl...