LI
Product
LibreSSL
16
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 4Medium 5Low 3
Watch
Add LibreSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35784 | 9.8 | Jun 16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3 Affected: before 3.6.3; 3.7.0 before 3.7.3 |
| CVE-2021-46880 | 9.8 | Apr 15 | x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes… Affected: before 3.4.2 |
| CVE-2015-5334 | 9.8 | Jan 23 | Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a… Affected: before 2.3.1 |
| CVE-2015-5333 | 7.5 | Jan 23 | Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object… Affected: before 2.3.1 |
| CVE-2018-8970 | 7.4 | Mar 24 | The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes… Affected: 2.7.0 |
| CVE-2019-25049 | 7.1 | Jul 1 | LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx) Affected: 2.9.1 through 3.2.1 |
| CVE-2019-25048 | 7.1 | Jul 1 | LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print) Affected: 2.9.1 through 3.2.1 |
| CVE-2026-118374 New | 5.9 | Oct 28 | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response Affected: through 4.4.0 |
| CVE-2021-41581 | 5.5 | Sep 24 | x509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0 has a stack-based buffer over-read Affected: through 3.4.0 |
| CVE-2022-48437 | 5.3 | Apr 12 | An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001 Affected: before 3.6.1 |
| CVE-2017-8301 | 5.3 | Apr 27 | LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of a verification result, in a use case where a user-provided… Affected: 2.5.1; 2.5.2; 2.5.3 |
| CVE-2018-12434 | 4.7 | Jun 15 | LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP Affected: before 2.6.5; 2.7.0; 2.7.1; 2.7.2; 2.7.3 |
| CVE-2026-118373 New | 3.7 | Oct 28 | LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() Affected: through 4.4.0 |
| CVE-2026-118372 New | 3.7 | Oct 28 | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path Affected: through 4.4.0 |
| CVE-2026-118371 New | 3.7 | Oct 28 | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line Affected: through 4.4.0 |
| CVE-2014-9424 | – | Dec 29 | Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly… Affected: through 2.1.1 |
Showing 16