Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-phqj-4mhp-q6mq
  • crates.io/openssl
 rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 19 May
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-xv59-967r-8726
  • crates.io/openssl
 rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding 07 May
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-xp3w-r5p5-63rr
  • crates.io/openssl
 rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 05 May
  • Fix available
  • Severity - 8.7 (High)
GHSA-pqf5-4pqq-29f5
  • crates.io/openssl
 rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 22 Apr
  • Fix available
  • Severity - 7.2 (High)
GHSA-xmgf-hq76-4vx2
  • crates.io/openssl
 rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length 22 Apr
  • Fix available
  • Severity - 1.7 (Low)
GHSA-8c75-8mhr-p7r9
  • crates.io/openssl
 rust-openssl has incorrect bounds assertion in aes key wrap 22 Apr
  • Fix available
  • Severity - 7.2 (High)
GHSA-ghm9-cr32-g9qj
  • crates.io/openssl
 rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check 22 Apr
  • Fix available
  • Severity - 8.1 (High)
GHSA-hppc-g8h3-xhp3
  • crates.io/openssl
 rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer 22 Apr
  • Fix available
  • Severity - 8.3 (High)
GHSA-4fcv-w3qc-ppgg
  • crates.io/openssl
 rust-openssl Use-After-Free in `Md::fetch` and `Cipher::fetch` 04 Apr 2025
  • Fix available
  • Severity - 6.3 (Medium)
RUSTSEC-2025-0022
  • crates.io/openssl
 Use-After-Free in `Md::fetch` and `Cipher::fetch` 04 Apr 2025
  • Fix available
GHSA-rpmj-rpgj-qmpm
  • crates.io/openssl
 rust-openssl ssl::select_next_proto use after free 03 Feb 2025
  • Fix available
  • Severity - 6.3 (Medium)
RUSTSEC-2025-0004
  • crates.io/openssl
 ssl::select_next_proto use after free 02 Feb 2025
  • Fix available
GHSA-q445-7m23-qrmw
  • crates.io/openssl
 openssl's `MemBio::get_buf` has undefined behavior with empty buffers 22 Jul 2024
  • Fix available
  • Severity - 6.9 (Medium)
RUSTSEC-2024-0357
  • crates.io/openssl
 `MemBio::get_buf` has undefined behavior with empty buffers 21 Jul 2024
  • Fix available
GHSA-xphf-cx8h-7q9g
  • crates.io/openssl
 `openssl` `X509StoreRef::objects` is unsound 28 Nov 2023
  • Fix available
RUSTSEC-2023-0072
  • crates.io/openssl
 `openssl` `X509StoreRef::objects` is unsound 23 Nov 2023
  • Fix available
Load more...