Skip to content

openssl vulnerabilities (Red Hat)

240 vulnerabilities.

openssl Red HatInteger underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...CVE-2012-2333Fix availableEPSS 27.9%6.8 MediumMay 14, 2012
openssl Red HatThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1...CVE-2012-2110Public exploitFix availableEPSS 47.9%7.5 HighApril 19, 2012
openssl Red HatThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...CVE-2012-1165Fix available5.0 MediumMarch 15, 2012
openssl Red HatThe implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and...CVE-2012-0884Fix availableEPSS 13.2%5.0 MediumMarch 12, 2012
openssl Red HatThe mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote...CVE-2006-7250Fix available5.0 MediumFebruary 29, 2012
openssl Red HatThe Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f...CVE-2011-4619Fix availableEPSS 17.8%5.0 MediumJanuary 6, 2012
openssl Red HatOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...CVE-2011-4577Fix available4.3 MediumJanuary 6, 2012
openssl Red HatThe SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly...CVE-2011-4576Fix availableEPSS 14.4%5.0 MediumJanuary 6, 2012
openssl Red HatDouble free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is...CVE-2011-4109Fix availableEPSS 16.9%9.3 HighJanuary 6, 2012
openssl Red HatThe DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only...CVE-2011-4108Fix availableEPSS 16.1%4.3 MediumJanuary 6, 2012
openssl Red Hatcrypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure...CVE-2011-3207Fix available5.0 MediumSeptember 22, 2011
openssl Red Hatssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to...CVE-2011-0014Fix available5.0 MediumFebruary 14, 2011
openssl Red HatOpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent...CVE-2008-7270Fix available4.3 MediumDecember 6, 2010
openssl Red HatOpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...CVE-2010-4180Fix available4.3 MediumDecember 6, 2010
openssl Red HatMultiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...CVE-2010-3864Fix availableEPSS 22.1%7.6 HighNovember 17, 2010
openssl Red HatThe kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is...CVE-2010-04334.3 MediumMarch 5, 2010
openssl Red HatOpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1...CVE-2009-3245Fix available10.0 HighMarch 5, 2010
openssl Red HatMemory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and...CVE-2009-4355Fix available5.0 MediumJanuary 13, 2010
openssl Red HatApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 MediumNovember 9, 2009
openssl Red HatThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...CVE-2009-2409Fix available5.1 MediumJuly 30, 2009
openssl Red HatThe dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2...CVE-2009-1387Fix availableEPSS 10.3%5.0 MediumJune 4, 2009
openssl Red Hatssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL...CVE-2009-1386Public exploitFix availableEPSS 80.1%5.0 MediumJune 4, 2009
openssl Red HatUse-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in...CVE-2009-1379Public exploitFix availableEPSS 18.2%5.0 MediumMay 19, 2009
openssl Red HatMultiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in...CVE-2009-1378Fix availableEPSS 12.7%5.0 MediumMay 19, 2009
openssl Red HatThe dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions...CVE-2009-1377Fix availableEPSS 11.3%5.0 MediumMay 19, 2009
openssl Red HatThe ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a...CVE-2009-0590Fix available5.0 MediumMarch 27, 2009
openssl Red HatOpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal...CVE-2008-5077Fix available5.8 MediumJanuary 7, 2009
openssl Red HatOff-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote...CVE-2007-4995Fix availableEPSS 10.5%9.3 HighOctober 13, 2007
openssl Red HatOff-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8...CVE-2007-5135Fix availableEPSS 16.1%6.8 MediumSeptember 27, 2007
openssl Red HatThe BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not...CVE-2007-3108Fix available1.2 LowAugust 8, 2007
openssl Red HatThe get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...CVE-2006-4343Public exploitFix availableEPSS 19.4%4.3 MediumSeptember 28, 2006
openssl Red HatBuffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...CVE-2006-3738Fix availableEPSS 49.9%10.0 HighSeptember 28, 2006
openssl Red HatOpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause...CVE-2006-2940Fix available7.8 HighSeptember 28, 2006
openssl Red HatOpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of...CVE-2006-2937Fix availableEPSS 11.0%7.8 HighSeptember 28, 2006
openssl Red HatThe SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when...CVE-2005-2969Fix available5.0 MediumOctober 18, 2005
openssl Red HatHyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel...CVE-2005-01095.6 MediumMarch 5, 2005
openssl Red HatThe der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...CVE-2004-0975Fix available2.1 LowOctober 20, 2004
openssl Red HatThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 MediumMarch 18, 2004
openssl Red HatOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 MediumMarch 17, 2004
openssl Red HatThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 HighMarch 17, 2004