Pentest Tools

Published on February 8th, 2023 📆 | 8094 Views ⚑

0

OpenSSL Toolkit 3.0.8

iSpeech.org

OpenSSL Toolkit 3.0.8

Posted Feb 8, 2023

Site openssl.org

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. The 3.x series is the current major version of OpenSSL.

Changes: Fixed NULL dereference during PKCS7 data verification. Fixed X.400 address type confusion in X.509 GeneralName. Fixed NULL dereference validating DSA public key. Fixed invalid pointer dereference in d2i_PKCS7 functions. Fixed use-after-free following BIO_new_NDEF. Fixed double-free after calling PEM_read_bio_ex. Fixed timing oracle in RSA decryption. Fixed X.509 Name Constraints read buffer overflow. Fixed X.509 policy constraints double locking.

tags | tool, encryption, protocol

systems | unix

advisories | CVE-2022-3996, CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0216, CVE-2023-0217, CVE-2023-0286, CVE-2023-0401

SHA-256 | 6c13d2bf38fdf31eac3ce2a347073673f5d63263398f1f69d0df4a41253e4b3e

Download | Favorite | View

Source link

Tagged with: 3.0.8 • advisory • CSRF • exploit • openssl • overflow • scanner • security • toolkit • vulnerability • whitepaper • XSS