A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

double free after calling PEM_read_bio_ex

double free after calling PEM_read_bio_ex

use-after-free following BIO_new_NDEF

use-after-free following BIO_new_NDEF

X.400 address type confusion in X.509 GeneralName

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Invalid certificate policies in leaf certificates are silently ignored

Invalid certificate policies in leaf certificates are silently ignored

Invalid certificate policies in leaf certificates are silently ignored

timing attack in RSA Decryption implementation

timing attack in RSA Decryption implementation

A possible denial of service while translating ASN.1 object identifiers

Fix DH_check() excessive time with over sized modulus

Fix DH_check() excessive time with over sized modulus

Skip checking q properties in DH_check() if it is obviously invalid

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

Setting ContentInfo fields to null, despite valid "type", may cause null dereference error, risking denial of service

A flaw was found in OpenSSL. A malicious client can trigger an uncontrolled memory consumption, resulting in a Denial of Service

A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSL_free_buffers function may cause memory to be accessed that was previously freed in some situations.

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSL_select_next_proto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called with a zero-length client list.