openssl openssl 1.0.2b vulnerabilities and exploits

(subscribe to this query)

The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL prior to 1.0.1t and 1.0.2 prior to 1.0.2h allows remote malicious users to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.

Openssl Openssl Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d Openssl Openssl 1.0.2e Openssl Openssl 1.0.2f Openssl Openssl 1.0.2g

1 Article

Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g allows remote malicious users to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c ...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote malicious users to cause a denial of service (out-of-bounds write or memory consumption) or p...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote malicious users to spoof a Certification ...

Oracle Supply Chain Products Suite 6.1.2.2 Oracle Supply Chain Products Suite 6.1.3.0 Oracle Supply Chain Products Suite 6.2.0 Oracle Jd Edwards Enterpriseone Tools 9.1 Oracle Jd Edwards Enterpriseone Tools 9.2 Openssl Openssl 1.0.1n Openssl Openssl 1.0.1o Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Oracle Opus 10g Ethernet Switch Family

1 EDB exploit1 Article

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g improperly calculates string lengths, which allows remote malicious users to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impac...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

The SSLv2 protocol, as used in OpenSSL prior to 1.0.1s and 1.0.2 prior to 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote malicious users to decryp...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

2 Nmap scripts1 Github repository2 Articles

Multiple integer overflows in OpenSSL 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g allow remote malicious users to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandle...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 prior to 1.0.1s and 1.0.2 prior to 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a c...

Openssl Openssl 1.0.1 Openssl Openssl 1.0.1a Openssl Openssl 1.0.1b Openssl Openssl 1.0.1c Openssl Openssl 1.0.1d Openssl Openssl 1.0.1e Openssl Openssl 1.0.1f Openssl Openssl 1.0.1g Openssl Openssl 1.0.1h Openssl Openssl 1.0.1i Openssl Openssl 1.0.1j Openssl Openssl 1.0.1k

1 Github repository

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that...

Openssl Openssl Openssl Openssl 1.0.2 Openssl Openssl 1.0.2a Openssl Openssl 1.0.2b Openssl Openssl 1.0.2c Openssl Openssl 1.0.2d Openssl Openssl 1.0.2e Openssl Openssl 1.0.2f Openssl Openssl 1.0.2g Openssl Openssl 1.0.2h Openssl Openssl 1.0.2i Openssl Openssl 1.0.2j

1 Github repository

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...

Openssl Openssl Openssl Openssl 1.0.0 Openssl Openssl 1.0.0a Openssl Openssl 1.0.0b Openssl Openssl 1.0.0c Openssl Openssl 1.0.0d Openssl Openssl 1.0.0e Openssl Openssl 1.0.0f Openssl Openssl 1.0.0g Openssl Openssl 1.0.0h Openssl Openssl 1.0.0i Openssl Openssl 1.0.0j

1 Article

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook