Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

Denial of service by excessive resource usage in verifying X509 policy constraints

A flaw when malicious CA could use this to deliberately assert invalid certificate policies to circumvent policy checking on the certificate altogether

A flaw when malicious CA could use this to deliberately assert invalid certificate policies to circumvent policy checking on the certificate altogether

A flaw when malicious CA could use this to deliberately assert invalid certificate policies to circumvent policy checking on the certificate altogether

A flaw allowing certificates with invalid or incorrect policies to pass the certificate verification

fix timing attack to RSA decryption

fix timing attack to RSA decryption

Applications that use the AES-XTS algorithm on the 64-bit ARM platform can crash in rare circumstances

Possible denial of service while translating ASN.1 object identifiers

AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

Fix DH_check() excessive time with over sized modulus

Fix DH_check() excessive time with over sized modulus

Skip checking q properties in DH_check() if it is obviously invalid

Incorrect cipher key and IV length processing

Incorrect cipher key and IV length processing

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service

A security flaw in OpenSSL's POLY1305 MAC implementation for PowerPC CPU platforms using vector instructions can corrupt application states, potentially causing crashes and denial of service if exploited.

A vulnerability in OpenSSL's EVP_PKEY_public_check() function for RSA public keys can lead to denial of service if it processes a key with a prime modulus from an untrusted source, causing prolonged computation

Setting ContentInfo fields to null, despite valid "type", may cause null dereference error, risking denial of service