Debian OpenSSL vulnerabilities

CVE-2022-4450 [HIGH] CVE-2022-4450: openssl - The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decode... The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possi

CVE-2015-3194 [HIGH] CVE-2015-3194: openssl - crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e al... crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter. Scope: local bookworm: resolved (fixed in 1.0.2e-1) bullseye: resolved (fixed in 1.0.2e-1) forky: resolved (fi

CVE-2010-2939 [MEDIUM] CVE-2010-2939: openssl - Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL c... Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to th

CVE-2026-28387 CVE-2026-28387: openssl - Issue summary: An uncommon configuration of clients performing DANE TLSA-based s... Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary cod

CVE-2016-2179 [HIGH] CVE-2016-2179: openssl - The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the l... The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c. Scope: local

CVE-2014-3470 [MEDIUM] CVE-2014-3470: openssl - The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8z... The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value. Scope: local bookworm: resolved (fixed in 1.0.1h-1) bulls

CVE-2002-0659 [MEDIUM] CVE-2002-0659: openssl - The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, all... The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. Scope: local bookworm: resolved (fixed in 0.9.6e-1) bullseye: resolved (fixed in 0.9.6e-1) forky: resolved (fixed in 0.9.6e-1) sid: resolved (fixed in 0.9.6e-1) trixie: resolved (fixed in 0.9.6e-1)

CVE-2016-2106 [HIGH] CVE-2016-2106: openssl - Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in Op... Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data. Scope: local bookworm: resolved (fixed in 1.0.2h-1) bullseye: resolved (fixed in 1.0.2h-1) forky: resolved (fixed in 1.0.2h-1) sid: resolved

CVE-2016-2181 [HIGH] CVE-2016-2181: openssl - The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 misha... The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c. Scope: local bookworm: resolved (fixed in 1.0.2

CVE-2016-0797 [HIGH] CVE-2016-0797: openssl - Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2... Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c

CVE-2016-6302 [HIGH] CVE-2016-6302: openssl - The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not... The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short. Scope: local bookworm: resolved (fixed in 1.0.2i-1) bullseye: resolved (fixed in 1.0.2i-1) forky: resolved (fixed in 1.0.2i-1) sid: res

CVE-2014-0221 [MEDIUM] CVE-2014-0221: openssl - The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, ... The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake. Scope: local bookworm: resolved (fixed in 1.0.1h-1) bullseye: resolved (fixed in 1.0.1h-1) forky: resolved

CVE-2009-1378 [MEDIUM] CVE-2009-1378: openssl - Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1... Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka "DTLS fragment handling memory leak." Scope:

CVE-2016-2109 [HIGH] CVE-2016-2109: openssl - The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implem... The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding. Scope: local bookworm: resolved (fixed in 1.0.2h-1) bullseye: resolved (fixed in 1.0.2h-1) forky: resolved (fixed in 1.0.2h-1) s

CVE-2016-2180 [HIGH] CVE-2016-2180: openssl - The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infr... The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command. Scope: local bookworm: resolved (fixed

CVE-2016-7053 [HIGH] CVE-2016-7053: openssl - In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can ... In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback

CVE-2016-0798 [HIGH] CVE-2016-0798: openssl - Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before ... Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c. Scope: local bookworm: resolved (fixed in 1.0.2g-1) bullseye: resolved (fi

CVE-2016-7052 [HIGH] CVE-2016-7052: openssl - crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a deni... crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation. Scope: local bookworm: resolved (fixed in 1.0.2j-1) bullseye: resolved (fixed in 1.0.2j-1) forky: resolved (fixed in 1.0.2j-1) sid: resolved (fixed in 1.0.2j-1) trixie: resolved (fixed in 1.0.2j-1

CVE-2026-31789 CVE-2026-31789: openssl - Issue summary: Converting an excessively large OCTET STRING value to a hexadecim... Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker can supply a crafted X.509 certificate with an excessively large OCTET STRING v

CVE-2019-1543 [HIGH] CVE-2019-1543: openssl - ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every... ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case o