Skip to contentOpenssl vulnerabilities
Newest
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 morecrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...CVE-2016-7052Fix availableEPSS 29.5%7.5 High
- opensslstatem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call,...CVE-2016-6309EPSS 70.2%9.8 Critical
- opensslstatem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory...CVE-2016-6308EPSS 12.3%5.9 Medium
- opensslThe state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking...CVE-2016-6307EPSS 13.8%5.9 Medium
- opensslThe ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows...CVE-2016-6305EPSS 16.0%7.5 High
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 moreMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...CVE-2016-6304Fix availableEPSS 63.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...CVE-2016-6306Fix availableEPSS 41.7%5.9 Medium
- openssl, nodejs node.js +1 moreInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...CVE-2016-6303Fix availableEPSS 32.0%9.8 Critical
- openssl, oracle linux, solaris +2 moreThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...CVE-2016-6302Fix availableEPSS 27.8%7.5 High
- openssl, hp icewall federation agent, icewall mcrp +3 more +5 moreThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...CVE-2016-2182Fix availableEPSS 44.2%9.8 Critical
- openssl, oracle linux +1 moreThe Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use...CVE-2016-2181Fix availableEPSS 22.6%7.5 High
- openssl, oracle linux +1 moreThe DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue...CVE-2016-2179Fix availableEPSS 26.6%7.5 High
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- openssl, oracle linux +1 moreThe TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time...CVE-2016-2180Fix availableEPSS 30.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +3 more +5 moreThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...CVE-2016-2178Fix available5.5 Medium
- openssl, hp icewall mcrp, icewall sso +3 more +5 moreOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...CVE-2016-2177Fix availableEPSS 44.5%9.8 Critical
- opensslcrypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed...CVE-2000-1254Fix available7.5 High
- opensslThe X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2...CVE-2016-2176Fix availableEPSS 24.0%8.2 High
- openssl, google android, redhat enterprise linux desktop +6 more +8 moreThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...CVE-2016-2108Fix availableEPSS 77.9%9.8 Critical
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...CVE-2016-2106Fix availableEPSS 27.3%7.5 High
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...CVE-2016-2109Fix availableEPSS 29.2%7.5 High
- opensslAn oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2...CVE-2016-0704Fix available5.9 Medium
- opensslThe get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9...CVE-2016-0703Fix available5.9 Medium
- opensslThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...CVE-2016-2842Fix availableEPSS 53.7%9.8 Critical
- openssl, pulsesecure client, steel belted radius +2 moreThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...CVE-2016-0800Public exploitFix availableEPSS 82.1%5.9 Medium
- openssl, pulsesecure client, steel belted radius +2 moreThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...CVE-2016-0799Fix availableEPSS 32.4%9.8 Critical
- opensslMemory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2...CVE-2016-0798Fix availableEPSS 24.4%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...CVE-2016-0797Fix availableEPSS 27.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...CVE-2016-0702Public exploitFix available5.1 Medium
- openssl, canonical ubuntu linux, debian linux +2 more +4 moreDouble free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1...CVE-2016-0705Fix availableEPSS 26.3%9.8 Critical
- opensslThe DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not...CVE-2016-0701Fix availableEPSS 83.6%3.7 Low
- openssl, oracle exalogic infrastructure, oss support tools +3 more +5 moressl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of...CVE-2015-3197Public exploitFix availableEPSS 10.7%5.9 Medium
- opensslThe ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote...CVE-2015-1794Fix available5.0 Medium
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...CVE-2015-3196Fix availableEPSS 13.5%4.3 Medium
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 morecrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...CVE-2015-3194Public exploitFix availableEPSS 44.0%7.5 High
- openssl, canonical ubuntu linux, nodejs node.js +2 moreThe Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1...CVE-2015-3193Fix availableEPSS 25.1%7.5 High
- openssl, oracle jd edwards enterpriseone tools, opus 10g ethernet switch family +1 more +3 moreThe X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1...CVE-2015-1793Public exploitFix availableEPSS 58.2%6.5 Medium
- opensslThe ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when...CVE-2015-17872.6 Low
- opensslThe sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to...CVE-2015-02915.0 Medium
- opensslThe multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0...CVE-2015-02905.0 Medium
- opensslThe ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that...CVE-2015-02854.3 Medium
- opensslThe ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa...CVE-2015-0208EPSS 29.5%4.3 Medium
- opensslThe dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate...CVE-2015-02075.0 Medium
- opensslThe dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m,...CVE-2014-8176Fix availableEPSS 16.6%7.5 High
- opensslMemory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1...CVE-2015-0206Fix availableEPSS 57.4%5.0 Medium
- opensslThe ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not...CVE-2014-3569Fix availableEPSS 19.5%5.0 Medium
- opensslThe ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL...CVE-2014-5139Public exploitFix availableEPSS 16.3%4.3 Medium
- Show moreLoading…