agentprime: openssl

agentprime: opensslEvery new CVE for openssl.https://agentprime.io/CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backloghttps://agentprime.io/advisories/CVE-2026-84784/https://agentprime.io/advisories/CVE-2026-84784/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:25 GMTCVECVE-2026-84783: Use-After-Free in X.509 Extension Cache Under Concurrent Usehttps://agentprime.io/advisories/CVE-2026-84783/https://agentprime.io/advisories/CVE-2026-84783/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:24 GMTCVECVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offsethttps://agentprime.io/advisories/CVE-2026-84782/https://agentprime.io/advisories/CVE-2026-84782/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:23 GMTCVECVE-2026-77696: Timing Side-Channel in SM2 Signature Generationhttps://agentprime.io/advisories/CVE-2026-77696/https://agentprime.io/advisories/CVE-2026-77696/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:22 GMTCVECVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoShttps://agentprime.io/advisories/CVE-2026-75806/https://agentprime.io/advisories/CVE-2026-75806/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:21 GMTCVECVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handlinghttps://agentprime.io/advisories/CVE-2026-75805/https://agentprime.io/advisories/CVE-2026-75805/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:20 GMTCVECVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streamshttps://agentprime.io/advisories/CVE-2026-75804/https://agentprime.io/advisories/CVE-2026-75804/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:19 GMTCVECVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshakehttps://agentprime.io/advisories/CVE-2026-72897/https://agentprime.io/advisories/CVE-2026-72897/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:18 GMTCVECVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-Vhttps://agentprime.io/advisories/CVE-2026-54875/https://agentprime.io/advisories/CVE-2026-54875/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:17 GMTCVECVE-2026-54873: QUIC STREAM Fragment Metadata DoShttps://agentprime.io/advisories/CVE-2026-54873/https://agentprime.io/advisories/CVE-2026-54873/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:16 GMTCVECVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curveshttps://agentprime.io/advisories/CVE-2026-54872/https://agentprime.io/advisories/CVE-2026-54872/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:15 GMTCVECVE-2026-42772: Potential CPU DoS via O(n^2) Fragment Reassembly in QUIChttps://agentprime.io/advisories/CVE-2026-42772/https://agentprime.io/advisories/CVE-2026-42772/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:14 GMTCVECVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accountedhttps://agentprime.io/advisories/CVE-2026-35191/https://agentprime.io/advisories/CVE-2026-35191/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:12 GMTCVECVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processinghttps://agentprime.io/advisories/CVE-2026-35189/https://agentprime.io/advisories/CVE-2026-35189/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 15:32:11 GMTCVECVE-2026-75803: AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()https://agentprime.io/advisories/CVE-2026-75803/https://agentprime.io/advisories/CVE-2026-75803/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 13:00:25 GMTCVEcriticalCVE-2026-63076: Invalid Pointer Dereference in CMP Server via Crafted protectionAlghttps://agentprime.io/advisories/CVE-2026-63076/https://agentprime.io/advisories/CVE-2026-63076/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 13:00:11 GMTCVECVE-2026-63075: QUIC ACK-only Packet Retention Can Cause Memory Exhaustionhttps://agentprime.io/advisories/CVE-2026-63075/https://agentprime.io/advisories/CVE-2026-63075/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 13:00:04 GMTCVECVE-2026-63074: CMP Indefinite Cache Growth of ExtraCertshttps://agentprime.io/advisories/CVE-2026-63074/https://agentprime.io/advisories/CVE-2026-63074/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:59:58 GMTCVECVE-2026-63073: Untrusted Sender DN Used as Format String in CMP Response Validationhttps://agentprime.io/advisories/CVE-2026-63073/https://agentprime.io/advisories/CVE-2026-63073/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:59:43 GMTCVEcriticalCVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrappinghttps://agentprime.io/advisories/CVE-2026-63072/https://agentprime.io/advisories/CVE-2026-63072/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:59:34 GMTCVECVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epochhttps://agentprime.io/advisories/CVE-2026-54874/https://agentprime.io/advisories/CVE-2026-54874/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:59:17 GMTCVECVE-2026-18798: QUIC Server May Trigger Double Free When Processing INITIAL Packethttps://agentprime.io/advisories/CVE-2026-18798/https://agentprime.io/advisories/CVE-2026-18798/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:59:04 GMTCVECVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificatehttps://agentprime.io/advisories/CVE-2026-14457/https://agentprime.io/advisories/CVE-2026-14457/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 12:58:29 GMTCVECVE-2026-14456: Unbounded Memory Growth in QUIC Server Incoming Channel Queuehttps://agentprime.io/advisories/CVE-2026-14456/https://agentprime.io/advisories/CVE-2026-14456/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:55:52 GMTCVECVE-2026-54876: Client-Side Memory Leak in OCSP Response Checkinghttps://agentprime.io/advisories/CVE-2026-54876/https://agentprime.io/advisories/CVE-2026-54876/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:59:36 GMTCVECVE-2026-45447: Heap Use-After-Free in the PKCS7_verify() Functionhttps://agentprime.io/advisories/CVE-2026-45447/https://agentprime.io/advisories/CVE-2026-45447/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:32 GMTCVECVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modeshttps://agentprime.io/advisories/CVE-2026-45446/https://agentprime.io/advisories/CVE-2026-45446/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:32 GMTCVECVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Pathhttps://agentprime.io/advisories/CVE-2026-45445/https://agentprime.io/advisories/CVE-2026-45445/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:31 GMTCVECVE-2026-42771: Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()https://agentprime.io/advisories/CVE-2026-42771/https://agentprime.io/advisories/CVE-2026-42771/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:30 GMTCVECVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied qhttps://agentprime.io/advisories/CVE-2026-42770/https://agentprime.io/advisories/CVE-2026-42770/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:29 GMTCVECVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdatehttps://agentprime.io/advisories/CVE-2026-42769/https://agentprime.io/advisories/CVE-2026-42769/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:28 GMTCVECVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()https://agentprime.io/advisories/CVE-2026-42768/https://agentprime.io/advisories/CVE-2026-42768/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:28 GMTCVECVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryptionhttps://agentprime.io/advisories/CVE-2026-42767/https://agentprime.io/advisories/CVE-2026-42767/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:27 GMTCVECVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryptionhttps://agentprime.io/advisories/CVE-2026-42766/https://agentprime.io/advisories/CVE-2026-42766/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:26 GMTCVECVE-2026-42765: NULL Dereference in Certificate Verification with OCSP Checkinghttps://agentprime.io/advisories/CVE-2026-42765/https://agentprime.io/advisories/CVE-2026-42765/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:25 GMTCVECVE-2026-42764: NULL Pointer Dereference in QUIC Server Initial Packet Handlinghttps://agentprime.io/advisories/CVE-2026-42764/https://agentprime.io/advisories/CVE-2026-42764/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:25 GMTCVECVE-2026-35188: Double-free When Checking OCSP Stapled Responsehttps://agentprime.io/advisories/CVE-2026-35188/https://agentprime.io/advisories/CVE-2026-35188/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:24 GMTCVECVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handlerhttps://agentprime.io/advisories/CVE-2026-34183/https://agentprime.io/advisories/CVE-2026-34183/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:23 GMTCVECVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messageshttps://agentprime.io/advisories/CVE-2026-34182/https://agentprime.io/advisories/CVE-2026-34182/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:22 GMTCVEcriticalCVE-2026-34181: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keyshttps://agentprime.io/advisories/CVE-2026-34181/https://agentprime.io/advisories/CVE-2026-34181/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:22 GMTCVECVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsinghttps://agentprime.io/advisories/CVE-2026-34180/https://agentprime.io/advisories/CVE-2026-34180/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:17 GMTCVECVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryptionhttps://agentprime.io/advisories/CVE-2026-9076/https://agentprime.io/advisories/CVE-2026-9076/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:16 GMTCVECVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversionhttps://agentprime.io/advisories/CVE-2026-7383/https://agentprime.io/advisories/CVE-2026-7383/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 16:03:15 GMTCVECVE-2026-31790: Incorrect Failure Handling in RSA KEM RSASVE Encapsulationhttps://agentprime.io/advisories/CVE-2026-31790/https://agentprime.io/advisories/CVE-2026-31790/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:56 GMTCVECVE-2026-31789: Heap Buffer Overflow in Hexadecimal Conversionhttps://agentprime.io/advisories/CVE-2026-31789/https://agentprime.io/advisories/CVE-2026-31789/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:54 GMTCVECVE-2026-28390: Possible NULL Dereference When Processing CMS KeyTransportRecipientInfohttps://agentprime.io/advisories/CVE-2026-28390/https://agentprime.io/advisories/CVE-2026-28390/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:54 GMTCVECVE-2026-28389: Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfohttps://agentprime.io/advisories/CVE-2026-28389/https://agentprime.io/advisories/CVE-2026-28389/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:53 GMTCVECVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRLhttps://agentprime.io/advisories/CVE-2026-28388/https://agentprime.io/advisories/CVE-2026-28388/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:52 GMTCVECVE-2026-28387: Potential Use-after-free in DANE Client Codehttps://agentprime.io/advisories/CVE-2026-28387/https://agentprime.io/advisories/CVE-2026-28387/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:51 GMTCVECVE-2026-28386: Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Supporthttps://agentprime.io/advisories/CVE-2026-28386/https://agentprime.io/advisories/CVE-2026-28386/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 22:00:50 GMTCVEcritical