« List of all vendors

OpenSSL

List of Opam related CVEs (68 found)

CVE-2024-6119 – Possible denial of service in X.509 name checks
9/3/2024
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2024-0727 – PKCS12 Decoding crashes
1/26/2024
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-6129 – POLY1305 MAC implementation corrupts vector registers on PowerPC
1/9/2024
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-6129 – POLY1305 MAC implementation corrupts vector registers on PowerPC
1/9/2024
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-5678 – Excessive time spent in DH check / generation with large Q parameter value
11/6/2023
Unknown severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-5363 – Incorrect cipher key & IV length processing
10/24/2023
Unknown severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-4807 – POLY1305 MAC implementation corrupts XMM registers on Windows
9/8/2023
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-3817 – Excessive time spent checking DH q parameter value
7/31/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-3446 – Excessive time spent checking DH keys and parameters
7/19/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-2975 – AES-SIV implementation ignores empty associated data entries
7/14/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-2650 – Possible DoS translating ASN.1 object identifiers
5/30/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-1255 – Input buffer over-read in AES-XTS implementation on 64 bit ARM
4/20/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-0466 – Certificate policy check not enabled
3/28/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-0465 – Invalid certificate policies in leaf certificates are silently ignored
3/28/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-0464 – Excessive Resource Usage Verifying X.509 Policy Constraints
3/22/2023
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2022-4203 – X.509 Name Constraints Read Buffer Overflow
2/24/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2022-4304 – Timing Oracle in RSA Decryption
2/8/2023
Medium severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2022-4450 – Double free after calling PEM_read_bio_ex
2/8/2023
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-0215 – Use-after-free following BIO_new_NDEF
2/8/2023
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)
CVE-2023-0216 – Invalid pointer dereference in d2i_PKCS7 functions
2/8/2023
High severity conf-libcurl conf-libssl conf-mingw-w64-openssl-i686 conf-mingw-w64-openssl-x86_64 conf-openssl ... (6)