LI
Product
LibreSSL
16
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 3High 4Medium 5Low 3
Watch
Add LibreSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5333 | 7.5 | Jan 23 | Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (memory consumption) via a large number of ASN.1 object… Affected: before 2.3.1 |
| CVE-2018-8970 | 7.4 | Mar 24 | The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support a certain special case of a zero name length, which causes… Affected: 2.7.0 |
| CVE-2019-25049 | 7.1 | Jul 1 | LibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from asn1_template_print_ctx) Affected: 2.9.1 through 3.2.1 |
| CVE-2019-25048 | 7.1 | Jul 1 | LibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from asn1_item_print_ctx and ASN1_item_print) Affected: 2.9.1 through 3.2.1 |
Showing 4