Skip to contentOpenssl vulnerabilities
Newest
- opensslThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1...CVE-2012-2110Public exploitFix availableEPSS 47.9%7.5 High
- opensslThe mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0...CVE-2012-1165Fix available5.0 Medium
- opensslThe implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and...CVE-2012-0884Fix availableEPSS 13.2%5.0 Medium
- opensslThe mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote...CVE-2006-7250Fix available5.0 Medium
- opensslOpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote...CVE-2012-0050Fix availableEPSS 13.7%5.0 Medium
- opensslcrypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other...CVE-2011-4354Fix available5.8 Medium
- opensslThe GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST...CVE-2012-0027Fix available5.0 Medium
- opensslThe Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f...CVE-2011-4619Fix availableEPSS 17.8%5.0 Medium
- opensslOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote...CVE-2011-4577Fix available4.3 Medium
- opensslThe SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly...CVE-2011-4576Fix availableEPSS 14.4%5.0 Medium
- opensslDouble free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is...CVE-2011-4109Fix availableEPSS 16.9%9.3 High
- opensslThe DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only...CVE-2011-4108Fix availableEPSS 16.1%4.3 Medium
- opensslThe ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0...CVE-2011-3210Fix available5.0 Medium
- opensslcrypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure...CVE-2011-3207Fix available5.0 Medium
- opensslThe elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic...CVE-2011-1945Fix available2.6 Low
- opensslssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to...CVE-2011-0014Fix available5.0 Medium
- opensslOpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent...CVE-2008-7270Fix available4.3 Medium
- opensslOpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters...CVE-2010-42527.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreOpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is...CVE-2010-4180Fix available4.3 Medium
- opensslMultiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a,...CVE-2010-3864Fix availableEPSS 22.1%7.6 High
- opensslDouble free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl...CVE-2010-2939Public exploitFix available4.3 Medium
- opensslRSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a,...CVE-2010-16336.4 Medium
- opensslThe Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before...CVE-2010-0742Fix available7.5 High
- opensslThe ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote...CVE-2010-0740Public exploitFix availableEPSS 20.3%5.0 Medium
- opensslOpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed...CVE-2010-09284.0 Medium
- opensslThe kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is...CVE-2010-04334.3 Medium
- opensslOpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1...CVE-2009-3245Fix available10.0 High
- opensslMemory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and...CVE-2009-4355Fix available5.0 Medium
- apache http server, gnu gnutls, mozilla nss +5 more +7 moreApache Tomcat affected by vulnerability in TLS and SSL protocolCVE-2009-3555Public exploitFix availableEPSS 87.3%5.8 Medium
- gnu gnutls, mozilla network security services, openssl +2 moreThe Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6...CVE-2009-2409Fix available5.1 Medium
- openssl, canonical ubuntu linux +1 moreThe dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2...CVE-2009-1387Fix availableEPSS 10.3%5.0 Medium
- openssl, canonical ubuntu linux +1 moressl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL...CVE-2009-1386Public exploitFix availableEPSS 80.1%5.0 Medium
- opensslUse-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in...CVE-2009-1379Public exploitFix availableEPSS 18.2%5.0 Medium
- openssl, canonical ubuntu linux +1 moreMultiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in...CVE-2009-1378Fix availableEPSS 12.7%5.0 Medium
- opensslThe dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions...CVE-2009-1377Fix availableEPSS 11.3%5.0 Medium
- opensslOpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed...CVE-2009-07895.0 Medium
- opensslThe CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly...CVE-2009-05912.6 Low
- openssl, debian linux +1 moreThe ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a...CVE-2009-0590Fix available5.0 Medium
- opensslOpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed...CVE-2009-0653Fix available7.5 High
- opensslOpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal...CVE-2008-5077Fix available5.8 Medium
- openssl, canonical ubuntu linux +1 moreOpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS...CVE-2008-1672Fix available4.3 Medium
- opensslDouble free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are...CVE-2008-0891Fix available4.3 Medium
- opensslMemory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9...CVE-2008-1678Fix available5.0 Medium
- openssl, canonical ubuntu linux, debian linux +2 moreOpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random...CVE-2008-0166Public exploitFix availableEPSS 70.7%7.5 High
- openssl fips object moduleThe PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding...CVE-2007-55026.4 Medium
- opensslOff-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote...CVE-2007-4995Fix availableEPSS 10.5%9.3 High
- opensslOff-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8...CVE-2007-5135Fix availableEPSS 16.1%6.8 Medium
- opensslThe BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not...CVE-2007-3108Fix available1.2 Low
- openssl, canonical ubuntu linux, debian linux +2 moreThe get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...CVE-2006-4343Public exploitFix availableEPSS 19.4%4.3 Medium
- opensslBuffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8...CVE-2006-3738Fix availableEPSS 49.9%10.0 High
- Show moreLoading…