Read the docs
TI-2025-42862 Aliases CVE-2025-69419GHSA-x77r-97gw-wh89

Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

Priority LOW 35CWE-787Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 37 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00607 49th percentileScored 2026-11-07
Fix Partial OpenSSL (OpenSSL): 3.6.1, 3.5.5, 3.4.4 +3Red Hat: 35 advisoriesRed Hat: 37 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenSSLOpenSSL3.6.0 to before 3.6.1; 3.5.0 to before 3.5.5; 3.4.0 to before 3.4.4; 3.3.0 to before 3.3.6; 3.0.0 to before 3.0.19; 1.1.1 to before 1.1.1ze3.6.1, 3.5.5, 3.4.4, 3.3.6, 3.0.19, 1.1.1zePatch availableCNA
  • OpenSSL VendorOpenSSL Affected 3.6.0 to before 3.6.1; 3.5.0 to before 3.5.5; 3.4.0 to before 3.4.4; 3.3.0 to before 3.3.6; 3.0.0 to before 3.0.19; 1.1.1 to before 1.1.1ze Fixed in 3.6.1, 3.5.5, 3.4.4, 3.3.6, 3.0.19, 1.1.1ze Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*1.1.1 to before 1.1.1ze; 3.0.0 to before 3.0.19; 3.3.0 to before 3.3.6; 3.4.0 to before 3.4.4; 3.5.0 to before 3.5.5; 3.6.0 to before 3.6.1VulnerableOpenSSL
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.1.1 to before 1.1.1ze; 3.0.0 to before 3.0.19; 3.3.0 to before 3.3.6; 3.4.0 to before 3.4.4; 3.5.0 to before 3.5.5; 3.6.0 to before 3.6.1 Vulnerable ·OpenSSL

Remediation

  • Fix · CNA OpenSSL (OpenSSL) Fixed in 3.6.1, 3.5.5, 3.4.4, 3.3.6, 3.0.19, 1.1.1ze

Red Hat 35 advisories

  • RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
Show 32 more Red Hat advisories
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:19187 Released 2026-05-19 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) compat-openssl11-1:1.1.1k-5.el9_8.2
  • RHSA-2026:14773 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202605060220-0, rhcos-ppc64le-415.92.202605060220-0, rhcos-s390x-415.92.202605060220-0 +1
  • RHSA-2026:15087 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.14.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202605060243-0, rhcos-ppc64le-414.92.202605060243-0, rhcos-s390x-414.92.202605060243-0 +1
  • RHSA-2026:7239 Released 2026-04-16 · Red Hat rating Important
    OpenShift Container Platform 4.13.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202604080111-0
  • RHSA-2026:7261 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssl-3.5.6-0.1.hum1@aarch64, openssl-3.5.6-0.1.hum1@src, openssl-3.5.6-0.1.hum1@x86_64 +10
  • RHSA-2026:5873 Released 2026-04-02 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.59 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202603231244-0, rhcos-ppc64le-416.94.202603231244-0, rhcos-s390x-416.94.202603231244-0 +1
  • RHSA-2026:5214 Released 2026-03-23 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) compat-openssl11-1:1.1.1k-4.el9_0.1
  • RHSA-2026:5217 Released 2026-03-23 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) compat-openssl11-1:1.1.1k-4.el9_2.1
  • RHSA-2026:4943 Released 2026-03-18 · Red Hat rating Important
    Red Hat Update Infrastructure 5.1 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:4824 Released 2026-03-17 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) compat-openssl11-1:1.1.1k-5.el9_6.2
  • RHSA-2026:4825 Released 2026-03-17 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) compat-openssl11-1:1.1.1k-5.el9_4.2
  • RHSA-2026:4472 Released 2026-03-12 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) compat-openssl11-1:1.1.1k-5.el9_7.1
  • RHSA-2026:3861 Released 2026-03-12 · Red Hat rating Important
    OpenShift Container Platform 4.12.86 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202603041314-0
  • RHSA-2026:4214 Released 2026-03-10 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) openssl-1:1.1.1c-21.el8_2.2, openssl-devel-1:1.1.1c-21.el8_2.2, openssl-libs-1:1.1.1c-21.el8_2.2 +1
  • RHSA-2026:4163 Released 2026-03-10 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) openssl-1:1.1.1g-18.el8_4.2, openssl-devel-1:1.1.1g-18.el8_4.2, openssl-libs-1:1.1.1g-18.el8_4.2 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) openssl-1:1.1.1g-18.el8_4.2, openssl-devel-1:1.1.1g-18.el8_4.2, openssl-libs-1:1.1.1g-18.el8_4.2 +1
  • RHSA-2026:3437 Released 2026-02-26 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
    • Red Hat Enterprise Linux BaseOS E4S (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
  • RHSA-2026:3364 Released 2026-02-25 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
  • RHSA-2026:3228 Released 2026-02-24 · Red Hat rating Important
    Cost Management Metrics Operator Update
    • Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
  • RHSA-2026:2994 Released 2026-02-23 · Red Hat rating Important
    Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP3 security update
    • Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr-util-1.6.3-4.el7jbcs, jbcs-httpd24-apr-util-devel-1.6.3-4.el7jbcs, jbcs-httpd24-apr-util-ldap-1.6.3-4.el7jbcs +31
    • Red Hat JBoss Core Services on RHEL 8 jbcs-httpd24-apr-util-1.6.3-4.el8jbcs, jbcs-httpd24-apr-util-devel-1.6.3-4.el8jbcs, jbcs-httpd24-apr-util-ldap-1.6.3-4.el8jbcs +21
  • RHSA-2026:2995 Released 2026-02-23 · Red Hat rating Important
    Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP3 security update
    • Red Hat JBoss Core Services 2.4.62.SP3
  • RHSA-2026:3042 Released 2026-02-23 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
  • RHSA-2026:2563 Released 2026-02-11 · Red Hat rating Important
    Red Hat Update Infrastructure 5 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:2485 Released 2026-02-10 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2026:1733 Released 2026-02-02 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) openssl-devel-1:3.0.1-46.el9_0.7, openssl-perl-1:3.0.1-46.el9_0.7
    • Red Hat Enterprise Linux BaseOS E4S (v.9.0) openssl-1:3.0.1-46.el9_0.7, openssl-libs-1:3.0.1-46.el9_0.7
  • RHSA-2026:1736 Released 2026-02-02 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:1594 Released 2026-01-29 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) openssl-devel-1:3.0.7-18.el9_2.3, openssl-perl-1:3.0.7-18.el9_2.3
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) openssl-1:3.0.7-18.el9_2.3, openssl-libs-1:3.0.7-18.el9_2.3
  • RHSA-2026:1519 Released 2026-01-29 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) openssl-devel-1:3.0.7-29.el9_4.2, openssl-perl-1:3.0.7-29.el9_4.2
    • Red Hat Enterprise Linux BaseOS EUS (v.9.4) openssl-1:3.0.7-29.el9_4.2, openssl-libs-1:3.0.7-29.el9_4.2
  • RHSA-2026:1503 Released 2026-01-28 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) openssl-devel-1:3.2.2-7.el9_6.2, openssl-perl-1:3.2.2-7.el9_6.2
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) openssl-1:3.2.2-7.el9_6.2, openssl-libs-1:3.2.2-7.el9_6.2
  • RHSA-2026:1496 Released 2026-01-28 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) openssl-devel-1:3.2.2-16.el10_0.6, openssl-perl-1:3.2.2-16.el10_0.6
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) openssl-1:3.2.2-16.el10_0.6, openssl-libs-1:3.2.2-16.el10_0.6
  • RHSA-2026:1473 Released 2026-01-28 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.5.1-7.el9_7, openssl-perl-1:3.5.1-7.el9_7
    • Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.5.1-7.el9_7, openssl-libs-1:3.5.1-7.el9_7
  • RHSA-2026:1472 Released 2026-01-28 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 10) openssl-devel-1:3.5.1-7.el10_1, openssl-perl-1:3.5.1-7.el10_1
    • Red Hat Enterprise Linux BaseOS (v. 10) openssl-1:3.5.1-7.el10_1, openssl-libs-1:3.5.1-7.el10_1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    OpenSSL — openssl-library.org/news/secadv/20260127.txt

    12 records Highest priority Priority CRITICAL 1 CRITICAL, 3 MEDIUM, 8 LOW

    Other records, highest priority first

    • TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsingPriority CRITICAL 85
    • TI-2025-10249 Improper validation of PBMAC1 parameters in PKCS#12 MAC verificationPriority MEDIUM 62
    • TI-2025-42864 NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionPriority MEDIUM 41
    Show all 12 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix yet: Fix deferred
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857
Cost Management 4Fixed RHSA-2026:3228
Red Hat Discovery 2Fixed RHSA-2026:1736
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:1472
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:1473, RHSA-2026:19187, RHSA-2026:4472
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:1733, RHSA-2026:5214
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:1594, RHSA-2026:5217
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:1496
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:1519, RHSA-2026:4825
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:1503, RHSA-2026:4824
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:1472
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:3042
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:1473
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2026:4214
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:4163
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:3437
Red Hat Enterprise Linux BaseOS E4S (v.8.6)Fixed RHSA-2026:3437
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:3364
Red Hat Enterprise Linux BaseOS E4S (v.9.0)Fixed RHSA-2026:1733
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:1594
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:1496
Red Hat Enterprise Linux BaseOS EUS (v.9.4)Fixed RHSA-2026:1519
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:1503
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:4163
Red Hat Enterprise Linux BaseOS TUS (v.8.6)Fixed RHSA-2026:3437
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:3364
Red Hat Hardened ImagesFixed RHSA-2026:7261
Red Hat Insights proxy 1.5Fixed RHSA-2026:2485
Red Hat JBoss Core Services 2.4.62.SP3Fixed RHSA-2026:2995
Red Hat JBoss Core Services on RHEL 7 ServerFixed RHSA-2026:2994
Red Hat JBoss Core Services on RHEL 8Fixed RHSA-2026:2994
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:3861
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:7239
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:15087
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14773
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:5873
Red Hat Update Infrastructure 5Fixed RHSA-2026:2563, RHSA-2026:4943
Not affected: 20 products
  • Cost Management 4
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream E4S (v.9.0)
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux AppStream EUS (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.8.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6)
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-69419
  2. 2026-10-03 Alias added: GHSA-x77r-97gw-wh89
  3. 2026-10-09 Fix available: RHSA-2026:2995 · Red Hat
  4. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  5. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  6. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  7. 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
  8. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.18, Red Hat JBoss Core Services 2.4.62.SP3 · Red Hat

References

Patch 5

Advisory 1

  • TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
  • TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
  • TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
See all 312 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences