FreshPorts - VuXML

The OpenSSL project reports:

Possible denial of service in X.509 name checks [Moderate severity] Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process.

SSL_select_next_proto buffer overread [Low severity] Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.

< 3.0.15,1

< 3.1.7

< 3.2.3

< 3.3.2

< 3.0.15

< 3.1.7

>= 14.1 lt 14.1_4

>= 14.0 lt 14.0_10

The OpenSSL project reports:

Use After Free with SSL_free_buffers (low).

Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations

< 3.0.13_5,1

< 3.1.5_5

< 3.2.1_5

< 3.3.0_2

< 3.0.13_5

< 3.1.5_5

The OpenSSL project reports:

Excessive time spent checking DSA keys and parameters (Low)

Checking excessively long DSA keys or parameters may be very slow.

< 3.0.13_4,1

< 3.1.5_4

< 3.2.1_4

< 3.3.0_1

< 3.0.13_4

< 3.1.5_4