LI
Product
LibreSSL
16
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 4Medium 5Low 3
Watch
Add LibreSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-35784 | 9.8 | Jun 16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3 Affected: before 3.6.3; 3.7.0 before 3.7.3 |
| CVE-2021-46880 | 9.8 | Apr 15 | x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes… Affected: before 3.4.2 |
| CVE-2015-5334 | 9.8 | Jan 23 | Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a… Affected: before 2.3.1 |
Showing 3
