← All credits

Viktor Dukhovni

15 vulnerability records and advisories credit this contributor.

RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Potential Use-after-free in DANE Client Code

Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion

AES-OCB IV Ignored on EVP_Cipher() Path

FFC-DH Peer Validation Uses Attacker-Supplied q

Heap Buffer Over-read in ASN.1 Content Parsing

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Possible denial of service in X.509 name checks

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Low-level invalid GF(2^m) parameters lead to OOB memory access