TI-2022-04067 CVE-2022-4450 · GHSA-v5w6-wcm8-jm4q
Double free after calling PEM_read_bio_ex
Priority MEDIUM 62
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.
RHSA-2023:3408
openssl security update
Released 2023-05-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) openssl-1:1.1.1k-9.el8_6, openssl-devel-1:1.1.1k-9.el8_6, openssl-libs-1:1.1.1k-9.el8_6 +1
Fixes 3 records
TI-2023-00208 CVE-2023-0215 · GHSA-r7jw-wp68-3xch
Use-after-free following BIO_new_NDEF
Priority MEDIUM 47
The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.
TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4
Timing Oracle in RSA Decryption
Priority MEDIUM 47
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.