VYPR

rpm package

suse/openssl-3&distro=SUSE Linux Enterprise Server 15 SP6-LTSS

pkg:rpm/suse/openssl-3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Vulnerabilities (23)

  • CVE-2026-9076HigJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer over-read may trigger a crash w

  • CVE-2026-7383HigJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefine

  • CVE-2026-45447HigJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#

  • CVE-2026-45446MedJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of such messages. Impact summary: An attacker can forge empty messages with arbitra

  • CVE-2026-45445HigJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce re

  • CVE-2026-42770LowJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r (a small

  • CVE-2026-42766MedJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgori

  • CVE-2026-34182CriJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers making use of these vulnerabilitie

  • CVE-2026-34180HigJun 9, 2026
    affected < 3.1.4-150600.5.53.1fixed 3.1.4-150600.5.53.1

    Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application (Denial

  • CVE-2026-31790HigApr 7, 2026
    affected < 3.1.4-150600.5.45.1fixed 3.1.4-150600.5.45.1

    Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the appli

  • CVE-2026-31789CriApr 7, 2026
    affected < 3.1.4-150600.5.45.1fixed 3.1.4-150600.5.45.1

    Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior

  • CVE-2026-28390HigApr 7, 2026
    affected < 3.1.4-150600.5.50.1fixed 3.1.4-150600.5.50.1

    Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur

  • CVE-2026-28389HigApr 7, 2026
    affected < 3.1.4-150600.5.45.1fixed 3.1.4-150600.5.45.1

    Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resu

  • CVE-2026-28388HigApr 7, 2026
    affected < 3.1.4-150600.5.45.1fixed 3.1.4-150600.5.45.1

    Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service f

  • CVE-2026-28387HigApr 7, 2026
    affected < 3.1.4-150600.5.45.1fixed 3.1.4-150600.5.45.1

    Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of po

  • CVE-2026-22796MedJan 27, 2026
    affected < 3.1.4-150600.5.42.1fixed 3.1.4-150600.5.42.1

    Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact su

  • CVE-2026-22795MedJan 27, 2026
    affected < 3.1.4-150600.5.42.1fixed 3.1.4-150600.5.42.1

    Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denia

  • CVE-2025-69421HigJan 27, 2026
    affected < 3.1.4-150600.5.42.1fixed 3.1.4-150600.5.42.1

    Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. T

  • CVE-2025-69420HigJan 27, 2026
    affected < 3.1.4-150600.5.42.1fixed 3.1.4-150600.5.42.1

    Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Imp

  • CVE-2025-69419HigJan 27, 2026
    affected < 3.1.4-150600.5.42.1fixed 3.1.4-150600.5.42.1

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cau

Page 1 of 2