information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

side-channel weak encryption vulnerability

Malformed X.509 IPAdressFamily could cause OOB read

Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang

RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys

Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

Key Extraction Side Channel in Multiple Crypto Libraries

timing side channel attack in the DSA signature algorithm

Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

0-byte record padding oracle

check is made for a version rollback attack when unpadding an RSA signature

Integer overflow in RSAZ modular exponentiation on x86_64

Fix asn1 string length

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service.

EDIPARTYNAME NULL pointer de-reference

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Timing attack in RSA Decryption implementation

A use-after-free vulnerability was found in OpenSSL's BIO_new_NDEF function.

Type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Invalid certificate policies in leaf certificates are silently ignored

Fix documentation of X509_VERIFY_PARAM_add0_policy().

A possible denial of service while translating ASN.1 object identifiers

Fix DH_check() excessive time with over sized modulus

Skip checking q properties in DH_check() if it is obviously invalid

A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.

A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.

Fix DH_check() excessive time with over sized modulus

The optional ContentInfo fields can be set to null, even if the "type" is a valid value, which can lead to a null dereference error that may cause a denial of service

The optional ContentInfo fields can be set to null, even if the "type" is a valid value, which can lead to a null dereference error that may cause a denial of service

The optional ContentInfo fields can be set to null, even if the "type" is a valid value, which can lead to a null dereference error that may cause a denial of service

SSL_select_next_proto buffer overread