OpenSSL - CVE CyberSecurity Database News (Page 2)

Jul 19, 2023 Exploit OpenSSL

CVE-2023-3446 - Denial of Service in OpenSSL via Excessively Long DH Keys – Full Breakdown & Exploit Code

Issue Summary: OpenSSL's Diffie-Hellman (DH) key checks can be extremely slow if you give it a very large "key" or "

May 30, 2023 Exploit OpenSSL

CVE-2023-2650 - Potential Denial of Service Attack Exploiting Specially Crafted ASN.1 Object Identifiers in OpenSSL

A vulnerability has been discovered in OpenSSL, which could cause applications to experience significant delays and potentially lead to a Denial of Service (DoS) attack.

Apr 20, 2023 OpenSSL

CVE-2023-1255 - AES-XTS Decryption Crash on 64-bit ARM - Analysis, Code Example, and Exploit Details

In March 2023, a subtle but important bug was discovered in the AES-XTS decryption algorithm implementation for 64-bit ARM systems. Tracked as CVE-2023-1255, the issue

Mar 28, 2023 Exploit Java OpenSSL

CVE-2023-0465 - How Invalid Certificate Policies Can Break Your Security – Hack and Explanation

On March 22, 2023, a moderate security issue was disclosed in OpenSSL, one of the most popular cryptography libraries used worldwide. Tracked as CVE-2023-0465, this

Mar 28, 2023 Exploit OpenSSL

CVE-2023-0466 - The Quiet Risk in OpenSSL Certificate Policy Checks

A subtle but significant issue has been discovered in OpenSSL’s certificate policy checking — CVE-2023-0466. If you work with X.509 certificates and depend on