OpenSSL - CVE CyberSecurity Database News (Page 3)

Mar 22, 2023 Exploit PHP OpenSSL

CVE-2023-0464: OpenSSL Security Vulnerability in Policy Constraint Verification for X.509 Certificate Chains

As of today, a critical security vulnerability with the identifier CVE-2023-0464 has been discovered in all supported versions of OpenSSL, the popular open-source software for

Feb 24, 2023 Exploit OpenSSL

CVE-2022-4203: Read Buffer Overrun Vulnerability in X.509 Certificate Verification Affecting Name Constraint Checking

CVE-2022-4203 refers to a read buffer overrun vulnerability found in the X.509 certificate verification process, particularly in the name constraint checking. The buffer overrun

Feb 8, 2023 Exploit OpenSSL

CVE-2022-4304: Timing-Based Side Channel Attack in OpenSSL RSA Decryption Implementation

A critical vulnerability, CVE-2022-4304, has been identified in the OpenSSL RSA decryption implementation. This vulnerability is a timing-based side channel attack, which, if exploited, could

Feb 8, 2023 API Exploit OpenSSL

CVE-2023-0215 - Vulnerability in BIO_new_NDEF May Result in Use-After-Free and Crashes in OpenSSL

A new vulnerability (CVE-2023-0215) has been discovered in the public API function BIO_new_NDEF, which is used for streaming ASN.1 data via a

Feb 8, 2023 Exploit Java OpenSSL

CVE-2022-4450: Double Free Vulnerability in OpenSSL PEM_read_bio_ex() and Related Functions

A security vulnerability has been identified in the OpenSSL library that could potentially be exploited by an attacker to cause a denial of service (DoS)