https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:46:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-00649 bdu:2015-00649 https://cve.radiocsirt.org/vuln/bdu:2015-00649 https://cve.radiocsirt.org/vuln/bell-cve-2014-3508 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2014-3508 https://cve.radiocsirt.org/vuln/certfr-2014-avi-344 certfr-2014-avi-344 https://cve.radiocsirt.org/vuln/certfr-2014-avi-344 https://cve.radiocsirt.org/vuln/euvd-2026-99275 EUVD-2026-99275 https://cve.radiocsirt.org/vuln/euvd-2026-99275 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3508 <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3508 https://cve.radiocsirt.org/vuln/ghsa-5fxv-32q4-g2fh <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> https://cve.radiocsirt.org/vuln/ghsa-5fxv-32q4-g2fh https://cve.radiocsirt.org/vuln/gsd-2014-3508 gsd-2014-3508 https://cve.radiocsirt.org/vuln/gsd-2014-3508 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> <p>libopenssl-devel-1.0.2j-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10271-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1052 <p>openssl: DTLS packet processing double free openssl: DTLS memory exhaustion openssl: DTLS memory leak from zero-length fragments openssl: information leak in pretty printing functions openssl: race condition in ssl_parse_serverhello_tlsext openssl: DTLS anonymous (EC)DH denial of service openssl: TLS protocol downgrade attack</p> <p>openssl: DTLS packet processing double free openssl: DTLS memory exhaustion openssl: DTLS memory leak from zero-length fragments openssl: information leak in pretty printing functions openssl: race condition in ssl_parse_serverhello_tlsext openssl: DTLS anonymous (EC)DH denial of service openssl: TLS protocol downgrade attack</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1052 https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 <p>Security update for openssl1</p> <p>Security update for openssl1</p> https://cve.radiocsirt.org/vuln/suse-ru-2015:0769-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3508 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: openssl</p> <p>The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of &#39;\0&#39; characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3508 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0498 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen und eine Protokoll Downgrade Attacke durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen und eine Protokoll Downgrade Attacke durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0498