TI-2023-00271 CVE-2023-0286 · GHSA-x4qr-2fvf-3mr5
X.400 address type confusion in X.509 GeneralName
Priority HIGH 70
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.
RHSA-2023:2932
edk2 security update
Released 2023-05-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) edk2-20220126gitbb1bba3d77-4.el8, edk2-aarch64-20220126gitbb1bba3d77-4.el8, edk2-ovmf-20220126gitbb1bba3d77-4.el8
Fixes 4 records
TI-2022-04067 CVE-2022-4450 · GHSA-v5w6-wcm8-jm4q
Double free after calling PEM_read_bio_ex
Priority MEDIUM 62
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.
TI-2023-00208 CVE-2023-0215 · GHSA-r7jw-wp68-3xch
Use-after-free following BIO_new_NDEF
Priority MEDIUM 47
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.
TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4
Timing Oracle in RSA Decryption
Priority MEDIUM 47
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.