TI-2023-00271 CVE-2023-0286 · GHSA-x4qr-2fvf-3mr5
X.400 address type confusion in X.509 GeneralName
Priority HIGH 70
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
RHSA-2023:1199
openssl security and bug fix update
Released 2023-03-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.0) openssl-devel-1:3.0.1-46.el9_0, openssl-perl-1:3.0.1-46.el9_0
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) openssl-1:3.0.1-46.el9_0, openssl-libs-1:3.0.1-46.el9_0
Fixes 8 records
TI-2022-04067 CVE-2022-4450 · GHSA-v5w6-wcm8-jm4q
Double free after calling PEM_read_bio_ex
Priority MEDIUM 62
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.
TI-2023-00208 CVE-2023-0215 · GHSA-r7jw-wp68-3xch
Use-after-free following BIO_new_NDEF
Priority MEDIUM 47
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.
TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4
Timing Oracle in RSA Decryption
Priority MEDIUM 47
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.
TI-2023-00382 CVE-2023-0401 · GHSA-vrh7-x64v-7vxq
NULL dereference during PKCS7 data verification
Priority MEDIUM 43
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data.
TI-2023-00210 CVE-2023-0217 · GHSA-vxrh-cpg7-8vjr
NULL dereference validating DSA public key
Priority MEDIUM 43
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function.
TI-2023-00209 CVE-2023-0216 · GHSA-29xx-hcv2-c4cp
Invalid pointer dereference in d2i_PKCS7 functions
Priority MEDIUM 43
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
TI-2022-03848 CVE-2022-4203 · GHSA-w67w-mw4j-8qrv
X.509 Name Constraints Read Buffer Overflow
Priority LOW 25
A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking.