Debian OpenSSL vulnerabilities

CVE-2022-2274 [CRITICAL] CVE-2022-2274: openssl - The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for... The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a re

CVE-2022-2068 [HIGH] CVE-2022-2068: openssl - In addition to the c_rehash shell command injection identified in CVE-2022-1292,... In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates bei

CVE-2022-1292 [HIGH] CVE-2022-1292: openssl - The c_rehash script does not properly sanitise shell metacharacters to prevent c... The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be

CVE-2009-1386 [MEDIUM] CVE-2009-1386: openssl - ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial ... ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello. Scope: local bookworm: resolved (fixed in 0.9.8k-1) bullseye: resolved (fixed in 0.9.8k-1) forky: resolved (fixed in 0.9.8k-1) sid: resolved (fixed in 0.9.8k-1) trixi

CVE-2023-0286 [HIGH] CVE-2023-0286: openssl - There is a type confusion vulnerability relating to X.400 address processing ins... There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE

CVE-2022-0778 [HIGH] CVE-2022-0778: openssl - The BN_mod_sqrt() function, which computes a modular square root, contains a bug... The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the i

CVE-2022-3358 [HIGH] CVE-2022-3358: openssl - OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() f... OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to implement custom ciphers. OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers passed to the E

CVE-2021-3712 [HIGH] CVE-2021-3712: openssl - ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING struct... ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed usi

CVE-2024-6119 [HIGH] CVE-2024-6119: openssl - Issue summary: Applications performing certificate name checks (e.g., TLS client... Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS cli

CVE-2016-2842 [CRITICAL] CVE-2016-2842: openssl - The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s ... The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of AS

CVE-2021-23840 [HIGH] CVE-2021-23840: openssl - Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow ... Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause

CVE-2015-1789 [HIGH] CVE-2015-1789: openssl - The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, ... The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication

CVE-2016-2177 [CRITICAL] CVE-2016-2177: openssl - OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer bound... OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. Scope: local bookworm: resolved (fixe

CVE-2016-2182 [CRITICAL] CVE-2016-2182: openssl - The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not ... The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. Scope: local bookworm: resolved (fixed in 1.0.2i-1) bullseye: resolved (fixed in 1.0

CVE-2018-0732 [HIGH] CVE-2018-0732: openssl - During key agreement in a TLS handshake using a DH(E) based ciphersuite a malici... During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1

CVE-2020-1967 [HIGH] CVE-2020-1967: openssl - Server or client applications that call the SSL_check_chain() function during or... Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious pe

CVE-2023-2650 [MEDIUM] CVE-2023-2650: openssl - Issue summary: Processing some specially crafted ASN.1 object identifiers or dat... Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may le

CVE-2017-3731 [HIGH] CVE-2017-3731: openssl - If an SSL/TLS server or client is running on a 32-bit host, and a specific ciphe... If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered

CVE-2024-5535 [CRITICAL] CVE-2024-5535: openssl - Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an em... Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes

CVE-2017-3737 [MEDIUM] CVE-2017-3737: openssl - OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechani... OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_c