Threats Tagged 'cve-2026-44662'

This security update for the SUSE snphost product addresses multiple vulnerabilities in OpenSSL, including out-of-bounds reads and writes, stack corruption, information leaks, undefined behavior with certificate processing, and heap buffer overflows related to AES key-wrap-with-padding encryption. These issues could lead to memory corruption or information disclosure. No specific affected versions are provided. No CVSS score is available, but the severity is assessed as high.

This security update for the SUSE product addresses multiple vulnerabilities in OpenSSL, including out-of-bounds reads and writes, stack corruption, information leaks, undefined behavior, and heap buffer overflows. These issues affect various OpenSSL components such as PEM password callbacks, AES key wrapping, digest finalization, PSK and cookie trampolines, OCSP URL processing, and cipher update operations. The vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-41677 to CVE-2026-45784. No specific affected versions are provided in the available data.

Multiple security vulnerabilities affecting libkrun related to OpenSSL have been addressed in a security update. These include use-after-free, buffer overflow, out-of-bounds read and write, stack corruption, information leak, undefined behavior, and heap buffer overflow issues. The vulnerabilities impact cryptographic operations and certificate processing. The update fixes these issues in affected versions of libkrun. No known exploits in the wild have been reported.

This security update for aws-nitro-enclaves-cli addresses multiple vulnerabilities in the rust-openssl crate, including out-of-bounds reads and writes, incorrect bounds assertions, memory leaks, heap buffer overflows, and arbitrary code execution via specially crafted certificates. The update upgrades aws-nitro-enclaves-cli to version 1.4.5 to fix these issues.

Multiple security issues were addressed in the agama-22+398.d23cf880d-49.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities identified by CVE-2026-42327 and others. No specific affected versions are detailed beyond this package update. The severity of these issues is assessed as medium.

This security update for SUSE addresses multiple vulnerabilities in the rust-openssl crate, including out-of-bounds reads and writes, incorrect bounds assertions, memory leaks, heap buffer overflows, and arbitrary code execution via specially crafted certificates. These issues affect the OpenSSL implementation in the rust-openssl crate and pose risks such as memory corruption and potential code execution. The update fixes these vulnerabilities to improve security.

This security update for python-cryptography addresses multiple vulnerabilities related to OpenSSL, including buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior in certificate handling. These issues affect cryptographic operations such as key derivation, password callbacks, AES key wrapping, and message digest finalization. The vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-41676 to CVE-2026-45784. No specific affected versions are stated in the provided data.

This security update for python-maturin addresses multiple high-severity vulnerabilities in OpenSSL components used by the product. The issues include buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior in cryptographic operations. These vulnerabilities could lead to memory corruption or information leakage. No specific affected versions are stated. No CVSS score is provided, but the impact is assessed as high due to the nature of the flaws.

A security update for rust-keylime addresses multiple vulnerabilities in the OpenSSL library used by the software. These include buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior issues affecting cryptographic operations. The update advances rust-keylime to version 0.2.9+49, incorporating OpenSSL version 0.10.81 and fixing these security issues. No specific affected versions of rust-keylime are stated.