https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 04:42:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-172929 EUVD-2026-172929 https://cve.radiocsirt.org/vuln/euvd-2026-172929 https://cve.radiocsirt.org/vuln/fkie_cve-2009-0127 <p>M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because &#34;these functions are not used anywhere in m2crypto.</p> <p>M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because &#34;these functions are not used anywhere in m2crypto.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-0127 https://cve.radiocsirt.org/vuln/ghsa-933f-4fwg-646j <p>** DISPUTED ** M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because &#34;these functions are not used anywhere in m2crypto.&#34;</p> <p>** DISPUTED ** M2Crypto does not properly check the return value from the OpenSSL EVP_VerifyFinal, DSA_verify, ECDSA_verify, DSA_do_verify, and ECDSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a Linux vendor disputes the relevance of this report to the M2Crypto product because &#34;these functions are not used anywhere in m2crypto.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-933f-4fwg-646j https://cve.radiocsirt.org/vuln/gsd-2009-0127 gsd-2009-0127 https://cve.radiocsirt.org/vuln/gsd-2009-0127