GCVE - cpe:2.3:a:gost_engine_project:gost

Approved changes feed: RSS · Atom

cpe:2.3:a:gost_engine_project:gost_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gost Engine Project (`5cc3badd-9aca-5a43-850d-b81b2c2ec1f4`)
Product	Gost Engine (`5dfe5797-2fb8-50a1-a5d6-26efd28fff9b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-29242`	vulnerable	2026-06-08 05:42:47.402829	Buffer Overflow on creating key transport blob in GOST Engine MEDIUM (5.9) GOST engine is a reference implementation of the Russian GOST crypto algorithms for OpenSSL. TLS clients using GOST engine when ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is agreed and the server uses 512 bit GOST secret keys are vulnerable to buffer overflow. GOST engine version 3.0.1 contains a patch for this issue. Disabling ciphersuite `TLS_GOSTR341112_256_WITH_KUZNYECHIK_CTR_OMAC` is a possible workaround. Published: 2022-05-24T14:55:13.000Z Updated: 2025-04-23T18:22:15.726Z Open on db.gcve.eu Reference links https://github.com/gost-engine/engine/security/advisories/GHSA-2rmw-8wpg-vgw5 https://github.com/gost-engine/engine/commit/7df766124f87768b43b9e8947c5a01e17545772c https://github.com/gost-engine/engine/commit/b2b4d629f100eaee9f5942a106b1ccefe85b8808 https://github.com/gost-engine/engine/commit/c6655a0b620a3e31f085cc906f8073fe81b2fad3 https://github.com/gost-engine/engine/releases/tag/v3.0.1	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.