Vulnerabilities

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.

An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function.

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data.