Поиск уязвимостей

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer a...

ELSA-2026-80510: compat-openssl10 security update (IMPORTANT)

ELSA-2026-77396: openssl security update (IMPORTANT)

ELSA-2026-76918: openssl security update (IMPORTANT)

ELSA-2026-500448: openssl security update (IMPORTANT)

ELSA-2026-500441: openssl security update (IMPORTANT)

ELSA-2026-500440: openssl security update (IMPORTANT)

Security update for openssl-1_1-livepatches

Security update for openssl-1_1-livepatches

Security update for openssl-1_1-livepatches

Security update for openssl-1_1-livepatches

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a crafted CMS message can trigger a deterministic 8-byte out-of-bounds heap write when the victim decrypts it with CMS_decrypt(), corrupting the heap and typically resulting in a Denial of Service. CWE: CWE-787: Out-of-bounds Write Description: The key-wrap OID is potentially attacker-controlled on the wire. CMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers. An attacker can take a legitimate message and change a single OID byte to select the padded variant while leaving the message otherwise valid. Since the unwrap key is derived from the recipient's private operation (ECDH key agreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot pass, and the decr...

Уязвимость функции CMS_decrypt() библиотеки OpenSSL, позволяющая нарушителю вызвать отказ в обслуживании

Security update for openssl-1_1

Security update for openssl-1_1

Security update for openssl-1_1

Security update for openssl-1_1

Security update for openssl-1_1

Уязвимость openssl

Уязвимость openssl3