Поиск уязвимостей
Количество 8
Количество 8
ALT-PU-2022-1067
ALT-PU-2022-1067: package `LibreSSL` update to version 3.4.2-alt1
ALT-PU-2023-4398
ALT-PU-2023-4398: package `LibreSSL` update to version 3.7.3-alt1
CVE-2021-46880
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
CVE-2021-46880
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 er ...
CVE-2021-41581
x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination.
CVE-2021-41581
x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints. ...
GHSA-j4x4-2cc8-7274
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
GHSA-675w-hmxx-cvf3
x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-1067 ALT-PU-2022-1067: package `LibreSSL` update to version 3.4.2-alt1 | CVSS3: 9.8 | почти 5 лет назад | |
| ALT-PU-2023-4398 ALT-PU-2023-4398: package `LibreSSL` update to version 3.7.3-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
 | CVE-2021-46880 x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded. | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| CVE-2021-46880 x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 er ... | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| CVE-2021-41581 x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination. | CVSS3: 5.5 | 1% Низкий | около 5 лет назад |
| CVE-2021-41581 x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints. ... | CVSS3: 5.5 | 1% Низкий | около 5 лет назад |
| GHSA-j4x4-2cc8-7274 x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded. | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
| GHSA-675w-hmxx-cvf3 x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read. When the input exceeds DOMAIN_PART_MAX_LEN, the buffer lacks '\0' termination. | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу