openssl-src (crates.io)
Advisories
59
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 300.0.12 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p openssl-src --precise 300.0.12Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-w67w-mw4j-8qrv openssl-src contains Read Buffer Overflow in X.509 Name Constraint |
Medium EPSS 1.39% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-vrh7-x64v-7vxq openssl-src contains `NULL` dereference during PKCS7 data verification |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-vrh7-x64v-7vxq openssl-src contains `NULL` dereference during PKCS7 data verification |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-vxrh-cpg7-8vjr openssl-src subject to NULL dereference validating DSA public key |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-vxrh-cpg7-8vjr openssl-src subject to NULL dereference validating DSA public key |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-r7jw-wp68-3xch openssl-src vulnerable to Use-after-free following `BIO_new_NDEF` |
High EPSS 5.02% |
>= 0.0.0-0, < 111.25.0>= 300.0.0, < 300.0.12 | 111.25.0300.0.12 |
| GHSA-r7jw-wp68-3xch openssl-src vulnerable to Use-after-free following `BIO_new_NDEF` |
High EPSS 5.02% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-r7jw-wp68-3xch openssl-src vulnerable to Use-after-free following `BIO_new_NDEF` |
High EPSS 5.02% |
< 111.25.0 | 111.25.0 |
| GHSA-v5w6-wcm8-jm4q openssl-src contains Double free after calling `PEM_read_bio_ex` |
High EPSS 28.59% |
>= 0.0.0-0, < 111.25.0>= 300.0.0, < 300.0.12 | 111.25.0300.0.12 |
| GHSA-v5w6-wcm8-jm4q openssl-src contains Double free after calling `PEM_read_bio_ex` |
High EPSS 28.59% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-v5w6-wcm8-jm4q openssl-src contains Double free after calling `PEM_read_bio_ex` |
High EPSS 28.59% |
< 111.25.0 | 111.25.0 |
| GHSA-29xx-hcv2-c4cp openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-29xx-hcv2-c4cp openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions |
High EPSS 1.85% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-x4qr-2fvf-3mr5 Vulnerable OpenSSL included in cryptography wheels |
High EPSS 69.29% |
>= 0.0.0-0, < 111.25.0>= 300.0.0, < 300.0.12 | 111.25.0300.0.12 |
| GHSA-x4qr-2fvf-3mr5 Vulnerable OpenSSL included in cryptography wheels |
High EPSS 69.29% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-x4qr-2fvf-3mr5 Vulnerable OpenSSL included in cryptography wheels |
High EPSS 69.29% |
< 111.25.0 | 111.25.0 |
| GHSA-x4qr-2fvf-3mr5 Vulnerable OpenSSL included in cryptography wheels |
High EPSS 69.29% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-x4qr-2fvf-3mr5 Vulnerable OpenSSL included in cryptography wheels |
High EPSS 69.29% |
< 111.25.0 | 111.25.0 |
| GHSA-p52g-cm5j-mjv4 openssl-src subject to Timing Oracle in RSA Decryption |
Medium EPSS 23.51% |
>= 0.0.0-0, < 111.25.0>= 300.0.0, < 300.0.12 | 111.25.0300.0.12 |
| GHSA-p52g-cm5j-mjv4 openssl-src subject to Timing Oracle in RSA Decryption |
Medium EPSS 23.51% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-w67w-mw4j-8qrv openssl-src contains Read Buffer Overflow in X.509 Name Constraint |
Medium EPSS 1.39% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-p52g-cm5j-mjv4 openssl-src subject to Timing Oracle in RSA Decryption |
Medium EPSS 23.51% |
< 111.25.0 | 111.25.0 |
| GHSA-vr8j-hgmm-jh9r Denial of service by double-checked locking in openssl-src |
High EPSS 1.31% |
>= 300.0.0, < 300.0.12 | 300.0.12 |
| GHSA-h8jm-2x53-xhp5 X.509 Email Address Variable Length Buffer Overflow |
High EPSS 92.49% |
>= 300.0.0, < 300.0.11 | 300.0.11 |
| GHSA-8rwr-x37p-mx23 X.509 Email Address 4-byte Buffer Overflow |
High EPSS 90.77% |
>= 300.0.0, < 300.0.11 | 300.0.11 |
| GHSA-8rwr-x37p-mx23 X.509 Email Address 4-byte Buffer Overflow |
High EPSS 90.77% |
>= 300.0.0, < 300.0.11 | 300.0.11 |
| GHSA-h8jm-2x53-xhp5 X.509 Email Address Variable Length Buffer Overflow |
High EPSS 92.49% |
>= 300.0.0, < 300.0.11 | 300.0.11 |
| GHSA-4f63-89w9-3jjv Using a Custom Cipher with `NID_undef` may lead to NULL encryption |
High EPSS 4.01% |
>= 300.0.0, < 300.0.10 | 300.0.10 |
| GHSA-4f63-89w9-3jjv Using a Custom Cipher with `NID_undef` may lead to NULL encryption |
High EPSS 4.01% |
>= 300.0.0, < 300.0.10 | 300.0.10 |
| GHSA-3wx7-46ch-7rq2 AES OCB fails to encrypt some bytes |
Medium EPSS 4.90% |
< 111.22.0 | 111.22.0 |
| GHSA-3wx7-46ch-7rq2 AES OCB fails to encrypt some bytes |
Medium EPSS 4.90% |
>= 300.0.0, < 300.0.9 | 300.0.9 |
| GHSA-3wx7-46ch-7rq2 AES OCB fails to encrypt some bytes |
Medium EPSS 4.90% |
>= 0.0.0-0, < 111.22.0>= 300.0.0, < 300.0.9 | 111.22.0300.0.9 |
| GHSA-735f-pg76-fxc4 openssl-src heap memory corruption with RSA private key operation |
Critical EPSS 48.23% |
>= 300.0.8, < 300.0.9 | 300.0.9 |
| GHSA-735f-pg76-fxc4 openssl-src heap memory corruption with RSA private key operation |
Critical EPSS 48.23% |
>= 300.0.8, < 300.0.9 | 300.0.9 |
| GHSA-g323-fr93-4j3c Resource leakage when decoding certificates and keys |
High EPSS 4.68% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-mfm6-r9g2-q4r7 `OCSP_basic_verify` may incorrectly verify the response signing certificate |
Medium EPSS 2.14% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-g323-fr93-4j3c Resource leakage when decoding certificates and keys |
High EPSS 4.68% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-mfm6-r9g2-q4r7 `OCSP_basic_verify` may incorrectly verify the response signing certificate |
Medium EPSS 2.14% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-638m-m8mh-7gw2 Incorrect MAC key used in the RC4-MD5 ciphersuite |
Medium EPSS 1.23% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-638m-m8mh-7gw2 Incorrect MAC key used in the RC4-MD5 ciphersuite |
Medium EPSS 1.23% |
>= 300.0.0, < 300.0.6 | 300.0.6 |
| GHSA-x3mh-jvjw-3xwx openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates |
High EPSS 73.19% |
>= 300.0.0, < 300.0.5 | 300.0.5 |
| GHSA-x3mh-jvjw-3xwx openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates |
High EPSS 73.19% |
< 111.18.0 | 111.18.0 |
| GHSA-x3mh-jvjw-3xwx openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates |
High EPSS 73.19% |
>= 0.0.0-0, < 111.18.0>= 300.0.0, < 300.0.5 | 111.18.0300.0.5 |
| GHSA-mmjf-f5jw-w72q Invalid handling of `X509_verify_cert()` internal errors in libssl |
High EPSS 50.10% |
>= 300.0.0, < 300.0.4 | 300.0.4 |
| GHSA-mmjf-f5jw-w72q Invalid handling of `X509_verify_cert()` internal errors in libssl |
High EPSS 50.10% |
>= 300.0.0, < 300.0.4 | 300.0.4 |
| GHSA-5ww6-px42-wc85 SM2 Decryption Buffer Overflow |
Critical EPSS 87.82% |
< 111.16.0 | 111.16.0 |
| GHSA-q9wj-f4qw-6vfj Read buffer overruns processing ASN.1 strings |
High EPSS 50.44% |
>= 0.0.0-0, < 111.16.0 | 111.16.0 |
| GHSA-q9wj-f4qw-6vfj Read buffer overruns processing ASN.1 strings |
High EPSS 50.44% |
< 111.16.0 | 111.16.0 |
| GHSA-5ww6-px42-wc85 SM2 Decryption Buffer Overflow |
Critical EPSS 87.82% |
>= 0.0.0-0, < 111.16.0 | 111.16.0 |
| GHSA-qgm6-9472-pwq7 Integer Overflow in openssl-src |
High EPSS 50.73% |
>= 0.0.0-0, < 111.14.0 | 111.14.0 |
| GHSA-83mx-573x-5rw9 openssl-src NULL pointer Dereference in signature_algorithms processing |
Medium EPSS 63.54% |
>= 0.0.0-0, < 111.15.0 | 111.15.0 |
| GHSA-83mx-573x-5rw9 openssl-src NULL pointer Dereference in signature_algorithms processing |
Medium EPSS 63.54% |
< 111.15.0 | 111.15.0 |
| GHSA-8hfj-xrj2-pm22 Certificate check bypass in openssl-src |
High EPSS 18.34% |
>= 111.11.0, < 111.15.0 | 111.15.0 |
| GHSA-8hfj-xrj2-pm22 Certificate check bypass in openssl-src |
High EPSS 18.34% |
>= 111.11.0, < 111.15.0 | 111.15.0 |
| GHSA-84rm-qf37-fgc2 Integer Overflow in openssl-src |
Medium EPSS 7.41% |
>= 0.0.0-0, < 111.14.0 | 111.14.0 |
| GHSA-84rm-qf37-fgc2 Integer Overflow in openssl-src |
Medium EPSS 7.41% |
< 111.14.0 | 111.14.0 |
| GHSA-qgm6-9472-pwq7 Integer Overflow in openssl-src |
High EPSS 50.73% |
< 111.14.0 | 111.14.0 |
| GHSA-jq65-29v4-4x35 Null pointer deference in openssl-src |
High EPSS 53.34% |
>= 111.6.0, < 111.9.0 | 111.9.0 |
| GHSA-jq65-29v4-4x35 Null pointer deference in openssl-src |
High EPSS 53.34% |
>= 111.6.0, < 111.9.0 | 111.9.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor