Most recent entries from all

bdu:2020-02873

Withdrawn: BELL-CVE-2020-1967 — CVE-2020-1967 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2020-avi-235 — Une vulnérabilité a été découverte dans OpenSSL. Elle permet à un attaquant de provoquer un déni de service à distance.

certfr-2020-avi-235

CLEANSTART-2026-FG73322 — Security fix for CVE-2020-1967 applied in: openssl 1.1.1g-r0

Affected: CleanStart: openssl

Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details.

cnvd-2021-28731

EUVD-2026-183430

fkie_cve-2020-1967

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).

GHSA-jq65-29v4-4x35 — Null pointer deference in openssl-src

Affected: crates.io: openssl-src

gsd-2020-1967

ICSA-24-046-02 — Siemens SIDIS Prime

In OPC Foundation OPC UA .NET Standard codebase 1.4.357.28, servers do not create sufficiently random numbers in OPCFoundation.NetStandard.Opc.Ua before 1.4.359.31, which allows man in the middle attackers to reuse encrypted user credentials sent over the network. Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an atta…

openSUSE-SU-2020:0933-1 — Security update for rust, rust-cbindgen

Security update for rust, rust-cbindgen

RUSTSEC-2020-0015 — Crash causing Denial of Service attack

Affected: crates.io: openssl-src

SUSE-SU-2020:1058-1 — Security update for openssl-1_1

Security update for openssl-1_1

UBUNTU-CVE-2020-1967

Affected: Ubuntu:20.04:LTS: openssl

WID-SEC-W-2023-3080 — OpenSSL: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen.