openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

AZL-82100 CVE-2026-28388 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

EUVD-2014-6880

Malware in sbrugna...

EUVD-2014-6681

Malware in sbrugna...

EUVD-2014-7008

Malware in sbrugna...

EUVD-2014-6799

Malware in sbrugna...

EUVD-2014-7279

Malware in sbrugna...

EUVD-2014-5594

Malware in sbrugna...

EUVD-2012-2486

Malware in sbrugna...

EUVD-2014-7467

Malware in sbrugna...

EUVD-2017-18508

Malware in sbrugna...

EUVD-2014-7484

Malware in sbrugna...

EUVD-2014-5557

Malware in sbrugna...

EUVD-2013-1068

Malware in sbrugna...

EUVD-2019-15529

Malware in sbrugna...

EUVD-2014-0177

Malware in sbrugna...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the SCT extension parsing process. An attacker can access confidential information by providing a specially crafted certificate containing a malformed SCT extension during X.509 certificate verificatio...

CVE-2020-5521

The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2012-2499

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985...

BIT-NODE-MIN-2022-3602 X.509 Email Address 4-byte Buffer Overflow

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...