Количество 38
Количество 38
BDU:2021-03742
Уязвимость функций EVP_CipherUpdate, EVP_EncryptUpdate и EVP_DecryptUpdate инструментария для протоколов TLS и SSL OpenSSL, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2021-1473
ALT-PU-2021-1473: package `openssl1.1` update to version 1.1.1j-alt1
ALT-PU-2020-3341
ALT-PU-2020-3341: package `node` update to version 14.15.1-alt1
ROS-20251016-04
Множественные уязвимости edk2-tools
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).
CVE-2021-23840
Integer overflow in CipherUpdate
CVE-2021-23840
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may ...
ALT-PU-2020-1090
ALT-PU-2020-1090: package `node` update to version 13.6.0-alt2
ALT-PU-2018-3724
ALT-PU-2018-3724: package `MySQL` update to version 8.0.13-alt1
GHSA-qgm6-9472-pwq7
Integer Overflow in openssl-src
openSUSE-SU-2021:0430-1
Security update for openssl-1_0_0
openSUSE-SU-2021:0427-1
Security update for openssl-1_1
SUSE-SU-2021:14670-1
Security update for openssl
SUSE-SU-2021:14667-1
Security update for openssl1
SUSE-SU-2021:0939-1
Security update for openssl
SUSE-SU-2021:0793-1
Security update for compat-openssl098
SUSE-SU-2021:0769-1
Security update for openssl-1_0_0
SUSE-SU-2021:0755-1
Security update for openssl-1_1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-03742 Уязвимость функций EVP_CipherUpdate, EVP_EncryptUpdate и EVP_DecryptUpdate инструментария для протоколов TLS и SSL OpenSSL, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 51% Средний | больше 5 лет назад |
 | ALT-PU-2021-1473 ALT-PU-2021-1473: package `openssl1.1` update to version 1.1.1j-alt1 | CVSS3: 7.5 | больше 5 лет назад | |
| ALT-PU-2020-3341 ALT-PU-2020-3341: package `node` update to version 14.15.1-alt1 | CVSS3: 7.5 | почти 6 лет назад | |
 | ROS-20251016-04 Множественные уязвимости edk2-tools | CVSS3: 9.8 | около 1 года назад | |
 | CVE-2021-23840 Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). | CVSS3: 7.5 | 51% Средний | больше 5 лет назад |
 | CVE-2021-23840 Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). | CVSS3: 7.5 | 51% Средний | больше 5 лет назад |
| CVE-2021-23840 Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). | CVSS3: 7.5 | 51% Средний | больше 5 лет назад |
 | CVE-2021-23840 Integer overflow in CipherUpdate | CVSS3: 7.5 | 51% Средний | около 1 года назад |
| CVE-2021-23840 Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may ... | CVSS3: 7.5 | 51% Средний | больше 5 лет назад |
| ALT-PU-2020-1090 ALT-PU-2020-1090: package `node` update to version 13.6.0-alt2 | CVSS3: 8.8 | почти 7 лет назад | |
| ALT-PU-2018-3724 ALT-PU-2018-3724: package `MySQL` update to version 8.0.13-alt1 | CVSS3: 7.5 | почти 8 лет назад | |
| GHSA-qgm6-9472-pwq7 Integer Overflow in openssl-src | CVSS3: 7.5 | 51% Средний | около 5 лет назад |
 | openSUSE-SU-2021:0430-1 Security update for openssl-1_0_0 | больше 5 лет назад | ||
| openSUSE-SU-2021:0427-1 Security update for openssl-1_1 | больше 5 лет назад | ||
| SUSE-SU-2021:14670-1 Security update for openssl | больше 5 лет назад | ||
| SUSE-SU-2021:14667-1 Security update for openssl1 | больше 5 лет назад | ||
| SUSE-SU-2021:0939-1 Security update for openssl | больше 5 лет назад | ||
| SUSE-SU-2021:0793-1 Security update for compat-openssl098 | больше 5 лет назад | ||
| SUSE-SU-2021:0769-1 Security update for openssl-1_0_0 | больше 5 лет назад | ||
| SUSE-SU-2021:0755-1 Security update for openssl-1_1 | больше 5 лет назад |
Уязвимостей на страницу