Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 1.0.2r vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-3817
Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that...
Openssl Openssl 1.0.2aOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.2jOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.2Openssl Openssl 1.0.2fOpenssl Openssl 1.0.2iOpenssl Openssl 1.0.2dOpenssl Openssl 1.0.2kOpenssl Openssl 1.0.2lOpenssl Openssl 1.0.2mOpenssl Openssl 1.0.2zbOpenssl Openssl 1.0.2nOpenssl Openssl 1.0.2oOpenssl Openssl 1.0.2pOpenssl Openssl 1.0.2qOpenssl Openssl 1.0.2rOpenssl Openssl 1.0.2sOpenssl Openssl 1.0.2t
4.3
CVSSv2
CVE-2019-1559
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...
Openssl OpensslCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Hyper Converged Infrastructure -Netapp Cloud Backup -Netapp Santricity Smi-s Provider -Netapp Element Software -Netapp Snapdrive -Netapp Snapcenter -Netapp Storage Automation Store -Netapp Ontap Select Deploy -Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp StoragegridNetapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Service Processor -
4.3
CVSSv2
CVE-2018-0734
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fi...
Openssl Openssl 1.1.1Openssl OpensslCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 9.0Nodejs Node.jsNodejs Node.js 10.13.0Netapp Cn1610 Firmware -Netapp Cloud Backup -Netapp Oncommand Unified ManagerNetapp Steelstore -Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Storage Automation Store -Oracle Api Gateway 11.1.2.4.0Oracle Peoplesoft Enterprise Peopletools 8.55Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Enterprise Manager Ops Center 12.3.3Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Mysql Enterprise Backup
5
CVSSv2
CVE-2017-18214
The moment module prior to 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.
Momentjs MomentTenable Nessus
7.8
CVSSv2
CVE-2016-4055
The duration function in the moment package prior to 2.11.2 for Node.js allows remote malicious users to cause a denial of service (CPU consumption) via a long string, aka a "regular expression Denial of Service (ReDoS)."
Momentjs MomentTenable NessusOracle Primavera Unifier
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook