rpm package
suse/openssl-1_0_0&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4
pkg:rpm/suse/openssl-1_0_0&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
Vulnerabilities (17)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-9076 | Hig | 7.5 | < 1.0.2p-150000.3.108.1 | 1.0.2p-150000.3.108.1 | Jun 9, 2026 | Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash w | |
| CVE-2026-7383 | Hig | 8.1 | < 1.0.2p-150000.3.108.1 | 1.0.2p-150000.3.108.1 | Jun 9, 2026 | Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefine | |
| CVE-2026-45447 | Hig | 8.8 | < 1.0.2p-150000.3.108.1 | 1.0.2p-150000.3.108.1 | Jun 9, 2026 | Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS# | |
| CVE-2026-42766 | Med | 5.9 | < 1.0.2p-150000.3.108.1 | 1.0.2p-150000.3.108.1 | Jun 9, 2026 | Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgori | |
| CVE-2026-34180 | Hig | 7.5 | < 1.0.2p-150000.3.108.1 | 1.0.2p-150000.3.108.1 | Jun 9, 2026 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial | |
| CVE-2026-31790 | Hig | 7.5 | < 1.0.2p-150000.3.105.1 | 1.0.2p-150000.3.105.1 | Apr 7, 2026 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli | |
| CVE-2026-31789 | Cri | 9.8 | < 1.0.2p-150000.3.105.1 | 1.0.2p-150000.3.105.1 | Apr 7, 2026 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior | |
| CVE-2026-28389 | Hig | 7.5 | < 1.0.2p-150000.3.105.1 | 1.0.2p-150000.3.105.1 | Apr 7, 2026 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resu | |
| CVE-2026-28388 | Hig | 7.5 | < 1.0.2p-150000.3.105.1 | 1.0.2p-150000.3.105.1 | Apr 7, 2026 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service f | |
| CVE-2026-28387 | Hig | 8.1 | < 1.0.2p-150000.3.105.1 | 1.0.2p-150000.3.105.1 | Apr 7, 2026 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of po | |
| CVE-2026-22796 | Med | 5.3 | < 1.0.2p-150000.3.102.1 | 1.0.2p-150000.3.102.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su | |
| CVE-2025-69421 | Hig | 7.5 | < 1.0.2p-150000.3.102.1 | 1.0.2p-150000.3.102.1 | Jan 27, 2026 | Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T | |
| CVE-2025-69420 | Hig | 7.5 | < 1.0.2p-150000.3.102.1 | 1.0.2p-150000.3.102.1 | Jan 27, 2026 | Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp | |
| CVE-2025-68160 | Med | 4.7 | < 1.0.2p-150000.3.102.1 | 1.0.2p-150000.3.102.1 | Jan 27, 2026 | Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in | |
| CVE-2025-9230 | Hig | 7.5 | < 1.0.2p-150000.3.97.1 | 1.0.2p-150000.3.97.1 | Sep 30, 2025 | Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds | |
| CVE-2024-5535 | Cri | 9.1 | < 1.0.2p-150000.3.94.1 | 1.0.2p-150000.3.94.1 | Jun 27, 2024 | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected appl | |
| CVE-2024-0727 | Med | 5.5 | < 1.0.2p-150000.3.91.1 | 1.0.2p-150000.3.91.1 | Jan 26, 2024 | Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can c |
- affected < 1.0.2p-150000.3.108.1fixed 1.0.2p-150000.3.108.1
Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash w
- affected < 1.0.2p-150000.3.108.1fixed 1.0.2p-150000.3.108.1
Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefine
- affected < 1.0.2p-150000.3.108.1fixed 1.0.2p-150000.3.108.1
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#
- affected < 1.0.2p-150000.3.108.1fixed 1.0.2p-150000.3.108.1
Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgori
- affected < 1.0.2p-150000.3.108.1fixed 1.0.2p-150000.3.108.1
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial
- affected < 1.0.2p-150000.3.105.1fixed 1.0.2p-150000.3.105.1
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli
- affected < 1.0.2p-150000.3.105.1fixed 1.0.2p-150000.3.105.1
Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior
- affected < 1.0.2p-150000.3.105.1fixed 1.0.2p-150000.3.105.1
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resu
- affected < 1.0.2p-150000.3.105.1fixed 1.0.2p-150000.3.105.1
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service f
- affected < 1.0.2p-150000.3.105.1fixed 1.0.2p-150000.3.105.1
Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of po
- affected < 1.0.2p-150000.3.102.1fixed 1.0.2p-150000.3.102.1
Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su
- affected < 1.0.2p-150000.3.102.1fixed 1.0.2p-150000.3.102.1
Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T
- affected < 1.0.2p-150000.3.102.1fixed 1.0.2p-150000.3.102.1
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp
- affected < 1.0.2p-150000.3.102.1fixed 1.0.2p-150000.3.102.1
Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in
- affected < 1.0.2p-150000.3.97.1fixed 1.0.2p-150000.3.97.1
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds
- affected < 1.0.2p-150000.3.94.1fixed 1.0.2p-150000.3.94.1
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected appl
- affected < 1.0.2p-150000.3.91.1fixed 1.0.2p-150000.3.91.1
Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in PKCS12 format can c