Skip to contentOpenssl vulnerabilities
Newest
- openssl, fedoraproject fedora, netapp clustered data ontap +10 more +12 moreX.509 Email Address 4-byte Buffer OverflowCVE-2022-3602Public exploitFix availableEPSS 90.8%7.5 High
- opensslUsing a Custom Cipher with NID_undef may lead to NULL encryptionCVE-2022-3358Fix available7.5 High
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytesCVE-2022-2097Public exploitFix available5.3 Medium
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructionsCVE-2022-2274Public exploitFix availableEPSS 48.2%9.8 Critical
- openssl, broadcom sannav, debian linux +29 more +31 moreThe c_rehash script allows command injectionCVE-2022-2068Fix availableEPSS 96.4%7.3 High
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 High
- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificatesCVE-2022-0778Public exploitFix availableEPSS 73.2%7.5 High
- openssl, debian linux, oracle enterprise manager ops center +5 more +7 moreBN_mod_exp may produce incorrect results on MIPSCVE-2021-4160Fix available5.9 Medium
- openssl, netapp 500f firmware, a250 firmware +13 more +15 moreInvalid handling of X509_verify_cert() internal errors in libsslCVE-2021-4044Public exploitFix availableEPSS 50.1%7.5 High
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer OverflowCVE-2021-3711Public exploitFix availableEPSS 87.8%9.8 Critical
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- openssl, apple ipados, iphone os +20 more +22 moreNull pointer deref in X509_issuer_and_serial_hash()CVE-2021-23841Public exploitFix available5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +18 more +20 moreInteger overflow in CipherUpdateCVE-2021-23840Public exploitFix availableEPSS 51.1%7.5 High
- openssl, oracle business intelligence, enterprise manager for storage management +5 more +7 moreIncorrect SSLv2 rollback protectionCVE-2021-23839Fix available3.7 Low
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreRaccoon attackCVE-2020-1968Fix available3.7 Low
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- openssl extension of ruby (git trunk), ruby-lang ruby +1 moreThe OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always...CVE-2011-41219.8 Critical
- opensslPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkeyCVE-2019-1563Fix available3.7 Low
- opensslFork ProtectionCVE-2019-1549Fix available5.3 Medium
- opensslECDSA remote timing attackCVE-2019-1547Fix available4.7 Medium
- opensslWindows builds with insecure path defaultsCVE-2019-1552Fix available3.3 Low
- opensslChaCha20-Poly1305 with long noncesCVE-2019-1543Fix available7.4 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- openssl, canonical ubuntu linux, debian linux +16 more +18 moreTiming attack against DSACVE-2018-0734Fix availableEPSS 12.2%5.9 Medium
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generationCVE-2018-0735Fix available5.9 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreClient DoS due to large DH parameterCVE-2018-0732Fix availableEPSS 47.0%7.5 High
- openssl, canonical ubuntu linux +1 moreCache timing vulnerability in RSA Key GenerationCVE-2018-0737Fix availableEPSS 11.6%5.9 Medium
- opensslIncorrect CRYPTO_memcmp on HP-UX PA-RISCCVE-2018-0733Fix available5.9 Medium
- openssl, canonical ubuntu linux, debian linux +2 moreConstructed ASN.1 types with a recursive definition could exceed the stackCVE-2018-0739Fix availableEPSS 18.6%6.5 Medium
- openssl, debian linux, nodejs node.js +2 moreThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...CVE-2017-3738Fix availableEPSS 13.4%5.9 Medium
- openssl, debian linux +1 moreOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...CVE-2017-3737Fix availableEPSS 78.7%5.9 Medium
- opensslThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...CVE-2017-3736Fix availableEPSS 10.1%6.5 Medium
- openssl, debian linux +1 moreWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...CVE-2017-3735Fix availableEPSS 21.0%5.3 Medium
- openssl, hp operations agent +1 moreEncrypt-Then-Mac renegotiation crashCVE-2017-3733Fix availableEPSS 12.9%7.5 High
- openssl, oracle agile engineering data management, communications application session controller +4 more +6 moreBad (EC)DHE parameters cause a client crashCVE-2017-3730Public exploitFix availableEPSS 55.3%7.5 High
- opensslChaCha20/Poly1305 heap-buffer-overflowCVE-2016-7054Public exploitFix availableEPSS 32.4%7.5 High
- opensslCMS Null dereferenceCVE-2016-7053Fix availableEPSS 21.7%7.5 High
- openssl, nodejs node.js +1 moreBN_mod_exp may produce incorrect results on x86_64CVE-2017-3732Fix availableEPSS 15.4%5.9 Medium
- openssl, nodejs node.js +1 moreTruncated packet could crash via OOB readCVE-2017-3731Fix availableEPSS 57.3%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 Medium
- openssl, nodejs node.js +1 moreThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...CVE-2016-7055Fix availableEPSS 14.2%5.9 Medium
- openssl, debian linux, fujitsu m10-1 firmware +42 more +44 moreA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...CVE-2016-8610Public exploitFix availableEPSS 39.9%7.5 High
- Show moreLoading…