Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Crypt-OpenSSL-PKCS12

cpan

Perl extension to OpenSSL's PKCS12 API.

View on github.com · View on metacpan.org

Security Advisories for Crypt-OpenSSL-PKCS12 in cpan

High
8 days ago

Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute. CPANSA-Crypt-OpenSSL-PKCS12-2026-17510

cpan Crypt-OpenSSL-PKCS12
about 2 months ago

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path. print_attribute() copies a UTF8STRING ASN.1 attribute value into a heap buffer sized exactly to its declared length via strncpy, leaving n... CPANSA-Crypt-OpenSSL-PKCS12-2026-9265

cpan Crypt-OpenSSL-PKCS12
3 months ago

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws. When parsing a PKCS12 file, with a >= 1 GiB OCTET STRING (or BIT STRING) attribute on a SAFEBAG, via info() or info_as_hash(), a heap out-of-bounds write would... CPANSA-Crypt-OpenSSL-PKCS12-2026-8507

cpan Crypt-OpenSSL-PKCS12
3 months ago

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs. Password parameters in PKCS12.xs are declared char *, which routes through Perl's default typemap to SvPV_nolen. The Perl length is discarded. The C code ... CPANSA-Crypt-OpenSSL-PKCS12-2026-8721

cpan Crypt-OpenSSL-PKCS12

Filter by Severity

High 1