engine vulnerabilities

1 known vulnerability in engine from Gost-engine. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  engine: Buffer Copy without Checking Size of Input

  CVE-2022-29242May 24, 2022Gost-engineEPSS 1.71%

  GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is agreed and the server uses 512 bit GOST secret keys are vulnerable to