Skip to content

Openssl vulnerabilities

Products

Openssl328

Newest

opensslOpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause...CVE-2006-2940Fix available7.8 HighSeptember 28, 2006
opensslOpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of...CVE-2006-2937Fix availableEPSS 11.0%7.8 HighSeptember 28, 2006
openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 CriticalSeptember 5, 2006
opensslThe SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when...CVE-2005-2969Fix available5.0 MediumOctober 18, 2005
openssl, canonical ubuntu linux +1 moreThe default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead...CVE-2005-2946Fix available7.5 HighSeptember 16, 2005
opensslThe design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to...CVE-2005-17975.1 MediumMay 26, 2005
gentoo linux, openssl, mandrakesoft mandrake linux +2 more +4 moreThe der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...CVE-2004-0975Fix available2.1 LowOctober 20, 2004
openssl, 4d webstar, apple mac os x +61 more +63 moreThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 MediumMarch 18, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 MediumMarch 17, 2004
openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 HighMarch 17, 2004
openssl, cisco css11000 content services switch, ios +2 more +4 moreOpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion)...CVE-2003-08515.0 MediumNovember 6, 2003
opensslOpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe...CVE-2002-1568Fix available5.0 MediumOctober 8, 2003
opensslDouble free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service ...CVE-2003-0545Fix availableEPSS 87.5%9.8 CriticalOctober 1, 2003
opensslOpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs,...CVE-2003-0544Fix available5.0 MediumOctober 1, 2003
opensslInteger overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service ...CVE-2003-0543Public exploitFix availableEPSS 27.4%5.0 MediumOctober 1, 2003
opensslThe SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote...CVE-2003-0131Fix available7.5 HighMarch 21, 2003
openssl, openpkg, stunnel +2 moreOpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain...CVE-2003-0147Fix available5.0 MediumMarch 18, 2003
openssl, freebsd, openbsd +2 moressl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a...CVE-2003-0078Public exploitFix availableEPSS 13.7%5.0 MediumFebruary 24, 2003
openssl, apple mac os x, oracle application server +2 more +4 moreThe ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote...CVE-2002-0659Public exploitFix availableEPSS 36.2%5.0 MediumJuly 30, 2002
opensslBuffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to...CVE-2002-0657Fix available7.5 HighJuly 30, 2002
openssl, apple mac os x, oracle application server +2 more +4 moreBuffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote...CVE-2002-0656Public exploitFix availableEPSS 89.8%7.5 HighJuly 30, 2002
openssl, apple mac os x, oracle application server +2 more +4 moreOpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII...CVE-2002-0655Fix available7.5 HighJuly 30, 2002
openssl, ssleay +1 moreThe Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to...CVE-2001-11415.0 MediumJuly 10, 2001
freebsd, openssl +1 moreOpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random...CVE-2000-05355.0 MediumJune 12, 2000
opensslOpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.CVE-1999-04287.5 HighMarch 22, 1999