- openssl_3.0.11-1~deb12u2 ()
- 3.0.14-1~deb12u2
- 2024-10-29 14:45:17
- CVE CVE-2023-5678, CVSSv2 Score: 5.3
- Description:
OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service
- Patch: openssl/3.0.2/CVE-2023-5678.patch
- CVE CVE-2023-5678, CVSSv2 Score: 5.3
- Description:
OpenSSL flaw in long X9.42 DH keys processing may cause slowdowns, risking denial of service
- Patch: openssl/3.0.2/CVE-2023-5678-adapt.patch
- CVE CVE-2023-6129, CVSSv2 Score: 6.5
- Description:
A security flaw in OpenSSL's POLY1305 MAC implementation for PowerPC CPU platforms using vector instructions can corrupt application states, potentially causing crashes and denial of service if exploited.
- Patch: openssl/3.0.2/CVE-2023-6129.patch
- CVE CVE-2023-6237, CVSSv2 Score: 5.9
- Description:
A vulnerability in OpenSSL's EVP_PKEY_public_check() function for RSA public keys can lead to denial of service if it processes a key with a prime modulus from an untrusted source, causing prolonged computation
- Patch: openssl/3.0.13/CVE-2023-6237.patch
- CVE CVE-2024-0727, CVSSv2 Score: 3.3
- Description:
Setting ContentInfo fields to null, despite valid "type", may cause null dereference error, risking denial of service
- Patch: openssl/3.0.2/CVE-2024-0727.patch
- CVE CVE-2024-2511, CVSSv2 Score: 3.7
- Description:
Unbounded memory growth with session handling in TLSv1.3
- Patch: openssl/3.0.2/CVE-2024-2511.patch
- CVE CVE-2024-4603, CVSSv2 Score: 5.3
- Description:
Excessive time spent checking DSA keys and parameters
- Patch: openssl/3.0.2/CVE-2024-4603.patch
- CVE CVE-2024-4741, CVSSv2 Score: 5.6
- Description:
Use After Free with SSL_free_buffers
- Patch: openssl/3.0.2/CVE-2024-4741.patch
- CVE CVE-2024-6119, CVSSv2 Score: 5.9
- Description:
Possible denial of service in X.509 name checks
- Patch: openssl/3.0.2/CVE-2024-6119.patch