openssl openssl 0.9.8i vulnerabilities and exploits

(subscribe to this query)

The CMS_verify function in OpenSSL 0.9.8h up to and including 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote malicious users to repudiate a signature that originally appeared to be valid but was actual...

Openssl Openssl 0.9.8h Openssl Openssl 0.9.8i Openssl Openssl 0.9.8j

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximat...

Openssl Openssl 0.9.8i

The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f up to and including 0.9.8m allows remote malicious users to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. N...

Openssl Openssl 0.9.8m Openssl Openssl 0.9.8g Openssl Openssl 0.9.8k Openssl Openssl 0.9.8j Openssl Openssl 0.9.8l Openssl Openssl 0.9.8i Openssl Openssl 0.9.8f Openssl Openssl 0.9.8h

1 EDB exploit

Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f up to and including 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote malicious users to execute arbitrary code via client data that triggers a heap-based...

Openssl Openssl 0.9.8m Openssl Openssl 0.9.8n Openssl Openssl 0.9.8g Openssl Openssl 0.9.8k Openssl Openssl 0.9.8j Openssl Openssl 0.9.8l Openssl Openssl 1.0.0 Openssl Openssl 0.9.8o Openssl Openssl 0.9.8i Openssl Openssl 0.9.8f Openssl Openssl 1.0.0a Openssl Openssl 0.9.8h

OpenSSL prior to 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.

Openssl Openssl 0.9.8j Openssl Openssl 0.9.8i Openssl Openssl 0.9.8a Openssl Openssl 0.9.8 Openssl Openssl 0.9.8e Openssl Openssl 0.9.8d Openssl Openssl Openssl Openssl 0.9.8k Openssl Openssl 0.9.8c Openssl Openssl 0.9.8b Openssl Openssl 0.9.8h Openssl Openssl 0.9.8g Openssl Openssl 0.9.8f

The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL prior to 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote malicious users to cause a denial of service (NULL pointer derefe...

Openssl Openssl 0.9.8b Openssl Openssl 0.9.8c Openssl Openssl 0.9.8e Openssl Openssl Openssl Openssl 0.9.8g Openssl Openssl 0.9.8k Openssl Openssl 0.9.8d Openssl Openssl 0.9.8j Openssl Openssl 0.9.8l Openssl Openssl 0.9.8a Openssl Openssl 0.9.8 Openssl Openssl 0.9.8i Openssl Openssl 0.9.8f Openssl Openssl 0.9.8h

ssl/t1_lib.c in OpenSSL 0.9.8h up to and including 0.9.8q and 1.0.0 up to and including 1.0.0c allows remote malicious users to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake mes...

Openssl Openssl 0.9.8h Openssl Openssl 0.9.8p Openssl Openssl 0.9.8q Openssl Openssl 0.9.8k Openssl Openssl 0.9.8l Openssl Openssl 0.9.8m Openssl Openssl 0.9.8i Openssl Openssl 0.9.8j Openssl Openssl 0.9.8n Openssl Openssl 0.9.8o Openssl Openssl 1.0.0b Openssl Openssl 1.0.0a Openssl Openssl 1.0.0 Openssl Openssl 1.0.0c

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook