CyberSecBulletin

Gost-engine vulnerabilities

We track 1 vulnerability in Gost-engine products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Gost-engine vulnerabilities

  • 7.5 High severity

    engine: Buffer Copy without Checking Size of Input

    CVE-2022-29242Gost-engineEPSS 1.71%

    GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is agreed and the server uses 512 bit GOST secret keys are vulnerable to