OP
Product
OpenSSL
On CISA KEVExploited in the wild
317
CVEs
1
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 17High 87Medium 74Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-0884 | – | Mar 13 | The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes… Affected: through 0.9.8t; 0.9.0b; 0.9.1b; 0.9.1c; 0.9.2b; 0.9.3; +34 more |
| CVE-2006-7250 | – | Feb 29 | The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application… Affected: through 0.9.8t; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2011-4354 | – | Jan 27 | crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an… Affected: through 0.9.8g; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2012-0050 | – | Jan 19 | OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an… Affected: 0.9.8s; 1.0.0f |
| CVE-2012-0027 | – | Jan 6 | The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon… Affected: through 1.0.0e; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2011-4619 | – | Jan 6 | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to… Affected: through 0.9.8r; 0.9.1c; 0.9.2b; 0.9.4; 0.9.5; 0.9.5a; +34 more |
| CVE-2011-4577 | – | Jan 6 | OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate… Affected: through 0.9.8r; 0.9.1c; 0.9.2b; 0.9.4; 0.9.5; 0.9.5a; +34 more |
| CVE-2011-4576 | – | Jan 6 | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers… Affected: through 0.9.8r; 0.9.1c; 0.9.2b; 0.9.4; 0.9.5; 0.9.5a; +34 more |
| CVE-2011-4109 | – | Jan 6 | Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +13 more |
| CVE-2011-4108 | – | Jan 6 | The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover… Affected: through 0.9.8r; 0.9.1c; 0.9.2b; 0.9.4; 0.9.5; 0.9.5a; +34 more |
| CVE-2011-3210 | – | Sep 22 | The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +24 more |
| CVE-2011-3207 | – | Sep 22 | crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +4 more |
| CVE-2011-1945 | – | May 31 | The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher… Affected: through 1.0.0d; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2011-0014 | – | Feb 18 | ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in… Affected: 0.9.8h; 0.9.8i; 0.9.8j; 0.9.8k; 0.9.8l; 0.9.8m; +13 more |
| CVE-2008-7270 | – | Dec 6 | OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote… Affected: through 0.9.8i; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2010-4180 | – | Dec 6 | OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session… Affected: before 0.9.8q; 1.0.0 before 1.0.0c |
| CVE-2010-4252 | – | Dec 6 | OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for… Affected: through 1.0.0b; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2010-3864 | – | Nov 17 | Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow… Affected: 0.9.8f; 0.9.8g; 0.9.8h; 0.9.8i; 0.9.8j; 0.9.8k; +6 more |
| CVE-2010-2939 | – | Aug 17 | Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using… Affected: 0.9.7; 0.9.8; 1.0.0a |
| CVE-2010-1633 | – | Jun 3 | RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0 |
| CVE-2010-0742 | – | Jun 3 | The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain… Affected: through 0.9.8n; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2010-0740 | – | Mar 26 | The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS… Affected: 0.9.8f; 0.9.8g; 0.9.8h; 0.9.8i; 0.9.8j; 0.9.8k; +2 more |
| CVE-2010-0433 | – | Mar 5 | The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain… Affected: through 0.9.8m; 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; +8 more |
| CVE-2009-3245 | – | Mar 5 | OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4)… Affected: through 0.9.8l; 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; +7 more |
| CVE-2010-0928 | – | Mar 5 | OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does… Affected: 0.9.8i |
| CVE-2009-4355 | – | Jan 14 | Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of… Affected: through 0.9.8l; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2009-2409 | – | Jul 30 | The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with… Affected: 0.9.8 through 0.9.8k |
| CVE-2009-1387 | – | Jun 4 | The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 0.9.8 before 0.9.8m |
| CVE-2009-1386 | – | Jun 4 | ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that… Affected: after 0.9.8 before 0.9.8i |
| CVE-2009-1379 | – | May 19 | Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service… Affected: 1.0.0 |
| CVE-2009-1378 | – | May 19 | Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of… Affected: after 0.9.8 before 0.9.8m |
| CVE-2009-1377 | – | May 19 | The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large… Affected: 0.9.8 before 0.9.8m |
| CVE-2009-0789 | – | Mar 27 | OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service… Affected: through 0.9.8j; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2009-0591 | – | Mar 27 | The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote… Affected: 0.9.8h; 0.9.8i; 0.9.8j |
| CVE-2009-0590 | – | Mar 27 | The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that… Affected: before 0.9.8k |
| CVE-2009-0653 | – | Feb 20 | OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites… Affected: 0.9.6 |
| CVE-2008-5077 | – | Jan 7 | OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain… Affected: through 0.9.8h; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2008-1678 | – | Jul 10 | Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory… Affected: 0.9.8f; 0.9.8g; 0.9.8h |
| CVE-2008-1672 | – | May 29 | OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses "particular cipher… Affected: 0.9.8f; 0.9.8g |
| CVE-2008-0891 | – | May 29 | Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a… Affected: 0.9.8f; 0.9.8g |
| CVE-2007-4995 | – | Oct 13 | Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecified vectors Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e |
| CVE-2007-5135 | – | Sep 27 | Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted… Affected: 0.9.7; 0.9.7; 0.9.7; 0.9.7; 0.9.7; 0.9.7; +20 more |
| CVE-2007-3108 | – | Aug 8 | The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct… Affected: through 0.9.8e |
| CVE-2006-2940 | – | Sep 28 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1)… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; 0.9.5; +34 more |
| CVE-2006-4343 | – | Sep 28 | The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +10 more |
| CVE-2006-3738 | – | Sep 28 | Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +10 more |
| CVE-2006-2937 | – | Sep 28 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +10 more |
| CVE-2006-4339 | – | Sep 5 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote… Affected: through 0.9.7; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2005-2969 | – | Oct 18 | The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +3 more |
| CVE-2005-1797 | – | May 26 | The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +22 more |