CyberSecBulletin

Gost Engine Project vulnerabilities

We track 1 vulnerability in Gost Engine Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Gost Engine Project vulnerabilities

  • 7.5 High severity

    engine: Buffer Copy without Checking Size of Input

    CVE-2022-29242Gost-engineEPSS 1.71%

    GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is agreed and the server uses 512 bit GOST secret keys are vulnerable to