rpm package
almalinux/openssl-devel
pkg:rpm/almalinux/openssl-devel
Vulnerabilities (75)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-34183 | Hig | 7.5 | < 1:3.5.5-4.el10_2.alma.1 | 1:3.5.5-4.el10_2.alma.1 | Jun 9, 2026 | Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the applica | |
| CVE-2026-34182 | Cri | 9.1 | < 1:3.5.5-4.el10_2.alma.1 | 1:3.5.5-4.el10_2.alma.1 | Jun 9, 2026 | Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilitie | |
| CVE-2026-34181 | Hig | 7.4 | < 1:3.5.5-4.el10_2.alma.1 | 1:3.5.5-4.el10_2.alma.1 | Jun 9, 2026 | Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user c | |
| CVE-2026-34180 | Hig | 7.5 | < 1:3.5.5-4.el10_2.alma.1 | 1:3.5.5-4.el10_2.alma.1 | Jun 9, 2026 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial | |
| CVE-2026-31790 | Hig | 7.5 | < 1:3.5.5-2.el10_2.alma.1 | 1:3.5.5-2.el10_2.alma.1 | Apr 7, 2026 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli | |
| CVE-2026-28390 | Hig | 7.5 | < 1:3.5.5-3.el9_8 | 1:3.5.5-3.el9_8 | Apr 7, 2026 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur | |
| CVE-2026-22796 | Med | 5.3 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su | |
| CVE-2026-22795 | Med | 5.5 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denia | |
| CVE-2025-69421 | Hig | 7.5 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T | |
| CVE-2025-69420 | Hig | 7.5 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp | |
| CVE-2025-69419 | Hig | 7.4 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cau | |
| CVE-2025-69418 | Med | 4.0 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes | |
| CVE-2025-68160 | Med | 4.7 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in | |
| CVE-2025-66199 | Med | 5.9 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approx | |
| CVE-2025-15469 | Med | 5.5 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, | |
| CVE-2025-15468 | Med | 5.9 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process ca | |
| CVE-2025-15467 | Hig | 8.8 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When | |
| CVE-2025-11187 | Med | 6.1 | < 1:3.5.1-7.el10_1.alma.1 | 1:3.5.1-7.el10_1.alma.1 | Jan 27, 2026 | Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash | |
| CVE-2025-9230 | Hig | 7.5 | < 1:3.5.1-4.el10_1.alma.1 | 1:3.5.1-4.el10_1.alma.1 | Sep 30, 2025 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds | |
| CVE-2024-12797 | Med | 6.3 | < 1:3.2.2-6.el9_5.1 | 1:3.2.2-6.el9_5.1 | Feb 11, 2025 | Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and DTLS connections u |
- affected < 1:3.5.5-4.el10_2.alma.1fixed 1:3.5.5-4.el10_2.alma.1
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the applica
- affected < 1:3.5.5-4.el10_2.alma.1fixed 1:3.5.5-4.el10_2.alma.1
Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilitie
- affected < 1:3.5.5-4.el10_2.alma.1fixed 1:3.5.5-4.el10_2.alma.1
Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user c
- affected < 1:3.5.5-4.el10_2.alma.1fixed 1:3.5.5-4.el10_2.alma.1
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial
- affected < 1:3.5.5-2.el10_2.alma.1fixed 1:3.5.5-2.el10_2.alma.1
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli
- affected < 1:3.5.5-3.el9_8fixed 1:3.5.5-3.el9_8
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denia
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cau
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approx
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519,
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process ca
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When
- affected < 1:3.5.1-7.el10_1.alma.1fixed 1:3.5.1-7.el10_1.alma.1
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash
- affected < 1:3.5.1-4.el10_1.alma.1fixed 1:3.5.1-4.el10_1.alma.1
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds
- affected < 1:3.2.2-6.el9_5.1fixed 1:3.2.2-6.el9_5.1
Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and DTLS connections u
Page 2 of 4