openssl-static vulnerabilities

Known vulnerabilities in the openssl-static package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Information Exposure	<1:1.0.2k-24.amzn2.0.13
L NULL Pointer Dereference	<1:1.0.2k-24.amzn2.0.12
M Missing Required Cryptographic Step	<1:1.0.2k-24.amzn2.0.11
M Resource Exhaustion	<1:1.0.2k-24.amzn2.0.9
M Excessive Iteration	<1:1.0.2k-24.amzn2.0.9
M Resource Exhaustion	<1:1.0.2k-24.amzn2.0.7
M Resource Exhaustion	<1:1.0.2k-24.amzn2.0.7
M Improper Certificate Validation	<1:1.0.2k-24.amzn2.0.7
M Improper Certificate Validation	<1:1.0.2k-24.amzn2.0.7
H Use After Free	<1:1.0.2k-24.amzn2.0.6
H Information Exposure	<1:1.0.2k-24.amzn2.0.6
H Incorrect Type Conversion or Cast	<1:1.0.2k-24.amzn2.0.6
M Arbitrary Command Injection	<1:1.0.2k-24.amzn2.0.4
M Arbitrary Command Injection	<1:1.0.2k-24.amzn2.0.3
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:1.0.2k-24.amzn2.0.2
M Out-of-bounds Read	<1:1.0.2k-19.amzn2.0.8
L Integer Overflow or Wraparound	<1:1.0.2k-19.amzn2.0.7
M Inadequate Encryption Strength	<1:1.0.2k-19.amzn2.0.6
M Integer Overflow or Wraparound	<1:1.0.2k-19.amzn2.0.6
M Integer Overflow or Wraparound	<1:1.0.2k-19.amzn2.0.6
H NULL Pointer Dereference	<1:1.0.2k-19.amzn2.0.4
H Use of a Broken or Risky Cryptographic Algorithm	<1:1.0.2k-19.amzn2.0.3
H CVE-2019-1547	<1:1.0.2k-19.amzn2.0.3
M Information Exposure	<1:1.0.2k-19.amzn2.0.1
M Use of a Broken or Risky Cryptographic Algorithm	<1:1.0.2k-19.amzn2.0.1
M Information Exposure	<1:1.0.2k-16.amzn2.1.1
M Information Exposure	<1:1.0.2k-16.amzn2.1.1
L Use of a Broken or Risky Cryptographic Algorithm	<1:1.0.2k-16.amzn2.0.2
M Uncontrolled Recursion	<1:1.0.2k-16.amzn2.0.1
M Key Management Errors	<1:1.0.2k-16.amzn2.0.1
M Information Exposure	<1:1.0.2k-16.amzn2.0.1
M Out-of-Bounds	<1:1.0.2k-16.amzn2.0.1
M Use of a Broken or Risky Cryptographic Algorithm	<1:1.0.2k-12.amzn2.0.1
M Out-of-bounds Read	<1:1.0.2k-12.amzn2.0.1
M Information Exposure	<1:1.0.2k-12.amzn2.0.1
M Information Exposure	<1:1.0.2k-12.amzn2.0.1

Vulnerability

Vulnerable Version

Information Exposure

<1:1.0.2k-24.amzn2.0.13

NULL Pointer Dereference

<1:1.0.2k-24.amzn2.0.12

Missing Required Cryptographic Step

<1:1.0.2k-24.amzn2.0.11

Resource Exhaustion

<1:1.0.2k-24.amzn2.0.9

Excessive Iteration

<1:1.0.2k-24.amzn2.0.9