Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: OpenSSL — openSUSE-SU-2019:2158 Clear all filters
TI-2019-01191 CVE-2019-1563 · GHSA-rv3r-f48w-6vvh

Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey

Priority LOW 30

In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transp…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03838 Published 2019-09-10 Partial fix CWE-203
TI-2019-01186 CVE-2019-1547 · GHSA-q2qv-648h-wcqp

ECDSA remote timing attack

Priority LOW 24

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.01129 Published 2019-09-10 Partial fix