Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Crypt-OpenSSL-PKCS12

cpan

Perl extension to OpenSSL's PKCS12 API.

View on github.com · View on metacpan.org

Security Advisories for Crypt-OpenSSL-PKCS12 in cpan

15 days ago

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info() or info_as_hash(), a heap out-of-bounds write would... CPANSA-Crypt-OpenSSL-PKCS12-2026-8507

cpan Crypt-OpenSSL-PKCS12
15 days ago

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl length is discarded. The C code ... CPANSA-Crypt-OpenSSL-PKCS12-2026-8721

cpan Crypt-OpenSSL-PKCS12

Filter by Severity