rpm package
opensuse/openssl-1_1&distro=openSUSE Leap 15.6
pkg:rpm/opensuse/openssl-1_1&distro=openSUSE%20Leap%2015.6
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-22796 | Med | 5.3 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su | |
| CVE-2026-22795 | Med | 5.5 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denia | |
| CVE-2025-69421 | Hig | 7.5 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T | |
| CVE-2025-69420 | Hig | 7.5 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp | |
| CVE-2025-69419 | Hig | 7.4 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cau | |
| CVE-2025-69418 | Med | 4.0 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes | |
| CVE-2025-68160 | Med | 4.7 | < 1.1.1w-150600.5.21.1 | 1.1.1w-150600.5.21.1 | Jan 27, 2026 | Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in | |
| CVE-2025-9230 | Hig | 7.5 | < 1.1.1w-150600.5.18.1 | 1.1.1w-150600.5.18.1 | Sep 30, 2025 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds | |
| CVE-2024-13176 | Med | 4.1 | < 1.1.1w-150600.5.12.2 | 1.1.1w-150600.5.12.2 | Jan 20, 2025 | Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measurin | |
| CVE-2024-4741 | Hig | 7.5 | < 1.1.1w-150600.5.3.1 | 1.1.1w-150600.5.3.1 | Nov 13, 2024 | Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of | |
| CVE-2024-5535 | Cri | 9.1 | < 1.1.1w-150600.5.6.1 | 1.1.1w-150600.5.6.1 | Jun 27, 2024 | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected appl | |
| CVE-2023-50782 | — | < 1.1.1w-150600.5.9.1 | 1.1.1w-150600.5.9.1 | Feb 5, 2024 | A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data. |
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denia
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cau
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes
- affected < 1.1.1w-150600.5.21.1fixed 1.1.1w-150600.5.21.1
Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in
- affected < 1.1.1w-150600.5.18.1fixed 1.1.1w-150600.5.18.1
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds
- affected < 1.1.1w-150600.5.12.2fixed 1.1.1w-150600.5.12.2
Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measurin
- affected < 1.1.1w-150600.5.3.1fixed 1.1.1w-150600.5.3.1
Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of
- affected < 1.1.1w-150600.5.6.1fixed 1.1.1w-150600.5.6.1
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected appl
- CVE-2023-50782Feb 5, 2024affected < 1.1.1w-150600.5.9.1fixed 1.1.1w-150600.5.9.1
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.