SM2 Decryption Buffer Overflow

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable…

Segmentation fault in SSL_check_chain

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL…

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length

CA certificate check bypass with X509_V_FLAG_X509_STRICT

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure

NULL pointer deref in signature_algorithms processing

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…

The X.509 GeneralName type is a generic type for representing different types of names

OpenSSL 1.0.2 supports SSLv2

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a…

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender