A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. Th$

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. Th$

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. Th$

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. Th$

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases $

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors tha$

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases $

A flaw was found in openssl. A server crash and denial of service attack could occur if a client sends a TLSv1.2 renegotiation ClientHello and omits the signature_algorithms extension but includes a signature_algorithms_cert extension. The highest threat from this vulnerability is to system availability

A flaw was found in openssl. A server crash and denial of service attack could occur if a client sends a TLSv1.2 renegotiation ClientHello and omits the signature_algorithms extension but includes a signature_algorithms_cert extensio$

A flaw was found in openssl. A server crash and denial of service attack could occur if a client sends a TLSv1.2 renegotiation ClientHello and omits the signature_algorithms extension but includes a signature_algorithms_cert extensio$

A flaw was found in openssl. A server crash and denial of service attack could occur if a client sends a TLSv1.2 renegotiation ClientHello and omits the signature_algorithms extension but includes a signature_algorithms_cert extensio$

Correctly calculate the length of SM2 plaintext given the ciphertext

Fix asn1 string length

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters

double free after calling PEM_read_bio_ex

double free after calling PEM_read_bio_ex

use-after-free following BIO_new_NDEF

use-after-free following BIO_new_NDEF

X.400 address type confusion in X.509 GeneralName

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Invalid certificate policies in leaf certificates are silently ignored

Invalid certificate policies in leaf certificates are silently ignored

Invalid certificate policies in leaf certificates are silently ignored

timing attack in RSA Decryption implementation

timing attack in RSA Decryption implementation

A possible denial of service while translating ASN.1 object identifiers

Fix DH_check() excessive time with over sized modulus

Fix DH_check() excessive time with over sized modulus

Skip checking q properties in DH_check() if it is obviously invalid

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

Setting ContentInfo fields to null, despite valid "type", may cause null dereference error, risking denial of service

A flaw was found in OpenSSL. A malicious client can trigger an uncontrolled memory consumption, resulting in a Denial of Service

A use-after-free vulnerability was found in OpenSSL. Calling the OpenSSL API SSL_free_buffers function may cause memory to be accessed that was previously freed in some situations.

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSL_select_next_proto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called with a zero-length client list.

Low-level invalid GF(2^m) parameters lead to OOB memory access

Timing side-channel in ECDSA signature computation