Поиск уязвимостей
Количество 18
Количество 18
GHSA-6m2h-7hrp-6jw8
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or ser...
CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers...
CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers...
CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or server
CVE-2026-14457
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Pu ...
ROS-20261109-80-0110
Уязвимость openssl
ROS-20261109-73-0111
Уязвимость openssl3
SUSE-SU-2026:4040-1
Security update for openssl-3-livepatches
SUSE-SU-2026:4038-1
Security update for openssl-3-livepatches
RLSA-2026:67165
Important: openssl security, bug fix, and enhancement update
RLSA-2026:67154
Important: openssl security, bug fix, and enhancement update
ELSA-2026-67165-0
ELSA-2026-67165-0: openssl security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-67154-0
ELSA-2026-67154-0: openssl security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-500327
ELSA-2026-500327: openssl security update (IMPORTANT)
ELSA-2026-500326
ELSA-2026-500326: openssl security update (IMPORTANT)
openSUSE-SU-2026:21744-1
Security update for openssl-3
SUSE-SU-2026:4039-1
Security update for openssl-3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-6m2h-7hrp-6jw8 Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or ser... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-14457 Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-14457 Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-14457 Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension. Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible. CWE: CWE-476: NULL Pointer Dereference Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA). When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or server | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate | 1% Низкий | 2 месяца назад | |
| CVE-2026-14457 Issue summary: In a server or client configuration with RFC7250 Raw Pu ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | ROS-20261109-80-0110 Уязвимость openssl | CVSS3: 7.5 | 1% Низкий | 4 дня назад |
| ROS-20261109-73-0111 Уязвимость openssl3 | CVSS3: 7.5 | 1% Низкий | 4 дня назад |
 | SUSE-SU-2026:4040-1 Security update for openssl-3-livepatches | 2 месяца назад | ||
| SUSE-SU-2026:4038-1 Security update for openssl-3-livepatches | 2 месяца назад | ||
 | RLSA-2026:67165 Important: openssl security, bug fix, and enhancement update | около 2 месяцев назад | ||
| RLSA-2026:67154 Important: openssl security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-67165-0 ELSA-2026-67165-0: openssl security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-67154-0 ELSA-2026-67154-0: openssl security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-500327 ELSA-2026-500327: openssl security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-500326 ELSA-2026-500326: openssl security update (IMPORTANT) | около 2 месяцев назад | ||
| openSUSE-SU-2026:21744-1 Security update for openssl-3 | 2 месяца назад | ||
| SUSE-SU-2026:4039-1 Security update for openssl-3 | 2 месяца назад |
Уязвимостей на страницу