Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Openssl

Openssl vulnerabilities

Products

Openssl328

Newest

Known exploitedIn KEVPublic exploitFix available

opensslMultiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1...CVE-2014-3512Fix availableEPSS 74.1%7.5 HighAugust 7, 2014
opensslThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in...CVE-2014-3511Fix availableEPSS 14.1%4.3 MediumAugust 7, 2014
opensslRace condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1...CVE-2014-3509Fix availableEPSS 12.9%6.8 MediumAugust 7, 2014
openssl, fedoraproject fedora, mariadb +2 more +4 moreThe dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...CVE-2014-0195Public exploitFix availableEPSS 100.0%6.8 MediumJune 5, 2014
openssl, debian linux, fedoraproject fedora +6 more +8 moreThe do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when...CVE-2014-0198Fix availableEPSS 40.3%4.3 MediumMay 2, 2014
openssl, fedoraproject fedora, mariadb +4 more +6 moreRace condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when...CVE-2010-5298Fix availableEPSS 34.1%4.0 MediumApril 14, 2014
openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 HighApril 7, 2014
opensslThe ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS...CVE-2013-4353Fix availableEPSS 11.9%4.3 MediumJanuary 7, 2014
opensslThe DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f...CVE-2013-6450Fix availableEPSS 15.4%5.8 MediumJanuary 1, 2014
opensslThe ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version...CVE-2013-6449Fix availableEPSS 21.3%4.3 MediumDecember 23, 2013
openssl, redhat enterprise linux +1 moreRace condition in a certain Red Hat patch to the PRNG lock implementation in the...CVE-2015-32164.3 MediumMarch 25, 2013
opensslThe do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1792Public exploitFix availableEPSS 22.9%5.0 MediumMarch 25, 2013
opensslRace condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9...CVE-2015-1791Public exploitFix availableEPSS 16.7%6.8 MediumMarch 25, 2013
opensslThe BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e...CVE-2015-1788Public exploitFix availableEPSS 20.5%4.3 MediumMarch 25, 2013
opensslUse-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL...CVE-2015-0209Fix availableEPSS 16.4%6.8 MediumMarch 25, 2013
opensslOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to...CVE-2014-3571Fix availableEPSS 22.1%5.0 MediumMarch 25, 2013
opensslMemory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0...CVE-2014-3567Fix availableEPSS 22.7%7.1 HighMarch 25, 2013
opensslMemory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote...CVE-2014-3513Fix availableEPSS 37.1%7.1 HighMarch 25, 2013
opensslThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...CVE-2014-3510Fix availableEPSS 18.4%4.3 MediumMarch 25, 2013
opensslMemory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before...CVE-2014-3507Public exploitFix availableEPSS 55.1%5.0 MediumMarch 25, 2013
openssld1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1...CVE-2014-3506Fix availableEPSS 46.1%5.0 MediumMarch 25, 2013
opensslDouble free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb...CVE-2014-3505Fix availableEPSS 46.1%5.0 MediumMarch 25, 2013
openssl, fedoraproject fedora, mariadb +8 more +10 moreThe dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0...CVE-2014-0221Public exploitFix availableEPSS 87.9%4.3 MediumMarch 25, 2013
opensslThe Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap...CVE-2014-0076Fix available1.9 LowMarch 25, 2013
opensslcrypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2...CVE-2012-2686Fix availableEPSS 39.6%5.0 MediumFebruary 8, 2013
apple iphone os, mac os x, safari +21 more +23 moreThe TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on...CVE-2015-4000Public exploitFix availableEPSS 99.9%3.7 LowAugust 30, 2012
opensslThe PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1...CVE-2015-1790Public exploitFix availableEPSS 24.0%5.0 MediumAugust 30, 2012
openssl, oracle sparc-opl service processor +1 moreThe X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0...CVE-2015-1789Fix availableEPSS 75.7%7.5 HighAugust 30, 2012
opensslThe SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and...CVE-2015-0293Fix availableEPSS 21.2%5.0 MediumAugust 30, 2012
opensslInteger underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding...CVE-2015-0292Fix availableEPSS 42.5%7.5 HighAugust 30, 2012
opensslThe PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m,...CVE-2015-0289Fix available5.0 MediumAugust 30, 2012
opensslThe X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0288Fix available5.0 MediumAugust 30, 2012
opensslThe ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1...CVE-2015-0287Fix available5.0 MediumAugust 30, 2012
opensslThe ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r...CVE-2015-0286Fix availableEPSS 19.9%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1...CVE-2015-0205Public exploitFix availableEPSS 22.3%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2015-0204Public exploitFix availableEPSS 98.7%4.3 MediumAugust 30, 2012
opensslOpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain...CVE-2014-8275Public exploitFix availableEPSS 15.0%5.0 MediumAugust 30, 2012
opensslThe ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p,...CVE-2014-3572Fix available5.0 MediumAugust 30, 2012
opensslThe BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k...CVE-2014-3570Public exploitFix availableEPSS 21.9%5.0 MediumAugust 30, 2012
opensslOpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce...CVE-2014-3568Fix availableEPSS 14.0%4.3 MediumAugust 30, 2012
openssl, apple mac os x, debian linux +17 more +19 moreThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...CVE-2014-3566Public exploitFix availableEPSS 100.0%3.4 LowAugust 30, 2012
opensslThe OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0...CVE-2014-3508Fix availableEPSS 24.5%4.3 MediumAugust 30, 2012
openssl, fedoraproject fedora, mariadb +8 more +10 moreThe ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1...CVE-2014-3470Fix availableEPSS 85.8%4.3 MediumAugust 30, 2012
openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 HighAugust 30, 2012
openssl, oracle openjdk, polarssl +2 moreThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...CVE-2013-0169Public exploitFix availableEPSS 35.6%2.6 LowAugust 30, 2012
opensslOpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform...CVE-2013-0166Fix availableEPSS 19.7%5.0 MediumAugust 30, 2012
opensslThe Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does...CVE-2011-5095Fix available4.0 MediumJune 20, 2012
openssl** DISPUTED ** OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client...CVE-2011-1473Public exploitDisputedEPSS 66.9%5.0 MediumJune 16, 2012
opensslInteger underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when...CVE-2012-2333Fix availableEPSS 27.9%6.8 MediumMay 14, 2012
opensslMultiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote...CVE-2012-2131Public exploitFix availableEPSS 16.8%7.5 HighApril 24, 2012
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open