ROS-20230418-05

A vulnerability in the OpenSSL cryptographic library is related to a boundary error in the PEM_read_bio_ex() function.
Exploitation of the vulnerability could allow an attacker acting remotely to pass a specially crafted PEM file to an application, cause a memory re-release error, and perform a typing attack.
a specially crafted PEM file to an application, cause a memory re-release error, and perform a denial of service attack (DoS).
"denial of service (DoS) attack.

The vulnerability in the OpenSSL cryptographic library is related to an existing third-party channel in the implementation of the
OpenSSL RSA Decryption. Exploitation of the vulnerability could allow an attacker acting remotely,
to perform a Bleichenbacher-style attack and decrypt data sent over the network.

The vulnerability in the GENERAL_NAME_cmp function of the OpenSSL library is related to a flaw in the data type conversion mechanism for processing x400 addresses.
of data types when processing x400 addresses. Exploitation of the vulnerability could allow an attacker,
acting remotely to cause a denial of service

Vulnerability of OpenSSL cryptographic library is related to NULL pointer dereferencing error during
PKCS7 data validation. Exploitation of the vulnerability could allow an attacker acting remotely,
to transmit specially crafted data to an application and perform a denial of service attack.