Openbsd Libressl vulnerabilities

• libressl LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response CVE-2026-118374 8.2 HighOctober 28, 2026
• libressl LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() CVE-2026-118373 6.3 MediumOctober 28, 2026
• libressl LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path CVE-2026-118372 6.3 MediumOctober 28, 2026
• libressl LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line CVE-2026-118371 6.3 MediumOctober 28, 2026
• openbsd libressl, openbsd +1 more A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and... CVE-2023-35784 Fix available 9.8 CriticalJune 16, 2023
• openbsd libressl, openbsd +1 more x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows... CVE-2021-46880 9.8 CriticalApril 14, 2023
• openbsd libressl, openbsd +1 more An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2... CVE-2022-48437 5.3 MediumApril 12, 2023
• openbsd libressl x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0... CVE-2021-41581 5.5 MediumSeptember 24, 2021
• openbsd libressl LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from... CVE-2019-25049 7.1 HighJuly 1, 2021
• openbsd libressl LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from... CVE-2019-25048 7.1 HighJuly 1, 2021
• libressl, opensuse +1 more Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause... CVE-2015-5333 7.5 HighJanuary 23, 2020
• libressl, opensuse +1 more Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to... CVE-2015-5334 9.8 CriticalJanuary 23, 2020
• openbsd libressl LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and... CVE-2018-12434 4.7 MediumJune 15, 2018
• openbsd libressl The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2... CVE-2018-8970 Public exploit 7.4 HighMarch 24, 2018
• openbsd libressl LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied... CVE-2017-8301 Fix available 5.3 MediumApril 27, 2017
• openbsd libressl Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in... CVE-2014-9424 7.5 HighDecember 29, 2014