rpm package
opensuse/openssl-1_0_0&distro=openSUSE Leap 15.2
pkg:rpm/opensuse/openssl-1_0_0&distro=openSUSE%20Leap%2015.2
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-3712 | Hig | 7.4 | < 1.0.2p-lp152.8.15.1 | 1.0.2p-lp152.8.15.1 | Aug 24, 2021 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated | |
| CVE-2021-23840 | Hig | 7.5 | < 1.0.2p-lp152.8.12.1 | 1.0.2p-lp152.8.12.1 | Feb 16, 2021 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be | |
| CVE-2021-23841 | — | < 1.0.2p-lp152.8.12.1 | 1.0.2p-lp152.8.12.1 | Feb 16, 2021 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (whi | ||
| CVE-2020-1971 | Med | 5.9 | < 1.0.2p-lp152.8.9.1 | 1.0.2p-lp152.8.9.1 | Dec 8, 2020 | The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi |
- affected < 1.0.2p-lp152.8.15.1fixed 1.0.2p-lp152.8.15.1
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated
- affected < 1.0.2p-lp152.8.12.1fixed 1.0.2p-lp152.8.12.1
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be
- CVE-2021-23841Feb 16, 2021affected < 1.0.2p-lp152.8.12.1fixed 1.0.2p-lp152.8.12.1
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (whi
- affected < 1.0.2p-lp152.8.9.1fixed 1.0.2p-lp152.8.9.1
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi