Skip to content

openssl vulnerabilities (Mageia)

182 vulnerabilities.

openssl MageiaThe DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f...CVE-2013-6450Fix availableEPSS 15.4%5.8 MediumJanuary 1, 2014
openssl MageiaThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...CVE-2013-6449Fix availableEPSS 21.3%4.3 MediumDecember 23, 2013
openssl MageiaThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1792Public exploitFix availableEPSS 22.9%5.0 MediumMarch 25, 2013
openssl MageiaRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...CVE-2015-1791Public exploitFix availableEPSS 16.7%6.8 MediumMarch 25, 2013
openssl MageiaThe BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e...CVE-2015-1788Public exploitFix availableEPSS 20.5%4.3 MediumMarch 25, 2013
openssl MageiaUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...CVE-2015-0209Fix availableEPSS 16.4%6.8 MediumMarch 25, 2013
openssl MageiaOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...CVE-2014-3571Fix availableEPSS 22.1%5.0 MediumMarch 25, 2013
openssl MageiaMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...CVE-2014-3567Fix availableEPSS 22.7%7.1 HighMarch 25, 2013
openssl MageiaMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...CVE-2014-3513Fix availableEPSS 37.1%7.1 HighMarch 25, 2013
openssl MageiaThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...CVE-2014-3510Fix availableEPSS 18.4%4.3 MediumMarch 25, 2013
openssl MageiaMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...CVE-2014-3507Public exploitFix availableEPSS 55.1%5.0 MediumMarch 25, 2013
openssl Mageiad1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...CVE-2014-3506Fix availableEPSS 46.1%5.0 MediumMarch 25, 2013
openssl MageiaDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...CVE-2014-3505Fix availableEPSS 46.1%5.0 MediumMarch 25, 2013
openssl MageiaThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...CVE-2014-0221Public exploitFix availableEPSS 87.9%4.3 MediumMarch 25, 2013
openssl MageiaThe Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap...CVE-2014-0076Fix available1.9 LowMarch 25, 2013
openssl MageiaThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...CVE-2015-4000Public exploitFix availableEPSS 99.9%3.7 LowAugust 30, 2012
openssl MageiaThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...CVE-2015-1790Public exploitFix availableEPSS 24.0%5.0 MediumAugust 30, 2012
openssl MageiaThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1789Fix availableEPSS 75.7%7.5 HighAugust 30, 2012
openssl MageiaThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...CVE-2015-0293Fix availableEPSS 21.2%5.0 MediumAugust 30, 2012
openssl MageiaThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...CVE-2015-0289Fix available5.0 MediumAugust 30, 2012
openssl MageiaThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0288Fix available5.0 MediumAugust 30, 2012
openssl MageiaThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0287Fix available5.0 MediumAugust 30, 2012
openssl MageiaThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...CVE-2015-0286Fix availableEPSS 19.9%5.0 MediumAugust 30, 2012
openssl MageiaThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...CVE-2015-0205Public exploitFix availableEPSS 22.3%5.0 MediumAugust 30, 2012
openssl MageiaThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2015-0204Public exploitFix availableEPSS 98.7%4.3 MediumAugust 30, 2012
openssl MageiaOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...CVE-2014-8275Public exploitFix availableEPSS 15.0%5.0 MediumAugust 30, 2012
openssl MageiaThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2014-3572Fix available5.0 MediumAugust 30, 2012
openssl MageiaThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...CVE-2014-3570Public exploitFix availableEPSS 21.9%5.0 MediumAugust 30, 2012
openssl MageiaThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 LowAugust 30, 2012
openssl MageiaThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...CVE-2014-3508Fix availableEPSS 24.5%4.3 MediumAugust 30, 2012
openssl MageiaThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...CVE-2014-3470Fix availableEPSS 85.8%4.3 MediumAugust 30, 2012
openssl MageiaOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 HighAugust 30, 2012