OP
Product
OpenSSL
On CISA KEVExploited in the wild
322
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 88Medium 78Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9230 | 7.5 | Sep 30 | Out-of-bounds read & write in RFC 3211 KEK Unwrap Affected: 3.5.0 before 3.5.4; 3.4.0 before 3.4.3; 3.3.0 before 3.3.5; 3.2.0 before 3.2.6; 3.0.0 before 3.0.18; 1.1.1 before 1.1.1zd; +1 more |
| CVE-2024-4741 | 7.5 | Nov 13 | Use After Free with SSL_free_buffers Affected: 3.3.0 before 3.3.1; 3.2.0 before 3.2.2; 3.1.0 before 3.1.6; 3.0.0 before 3.0.14; 1.1.1 before 1.1.1y |
| CVE-2024-6119 | 7.5 | Sep 3 | Possible denial of service in X.509 name checks Affected: 3.3.0 before 3.3.2; 3.2.0 before 3.2.3; 3.1.0 before 3.1.7; 3.0.0 before 3.0.15 |
| CVE-2023-5363 | 7.5 | Oct 24 | Incorrect cipher key & IV length processing Affected: 3.0.0 before 3.0.12; 3.1.0 before 3.1.4 |
| CVE-2023-0464 | 7.5 | Mar 22 | Excessive Resource Usage Verifying X.509 Policy Constraints Affected: 3.1.0 before 3.1.1; 3.0.0 before 3.0.9; 1.1.1 before 1.1.1u; 1.0.2 before 1.0.2zh |
| CVE-2023-0401 | 7.5 | Feb 8 | A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data Affected: 3.0.0 through 3.0.7 |
| CVE-2023-0217 | 7.5 | Feb 8 | An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() function Affected: 3.0.0 through 3.0.7 |
| CVE-2023-0216 | 7.5 | Feb 8 | An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions Affected: 3.0.0 through 3.0.7 |
| CVE-2022-4450 | 7.5 | Feb 8 | Double free after calling PEM_read_bio_ex Affected: 3.0.0 before 3.0.8; 1.1.1 before 1.1.1t |
| CVE-2023-0215 | 7.5 | Feb 8 | Use-after-free following BIO_new_NDEF Affected: 3.0.0 before 3.0.8; 1.1.1 before 1.1.1t; 1.0.2 before 1.0.2zg |
| CVE-2022-3996 | 7.5 | Dec 13 | If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively Affected: 3.0.0 through 3.0.7 |
| CVE-2022-3786 | 7.5 | Nov 1 | X.509 Email Address Variable Length Buffer Overflow Affected: 3.0.0 before 3.0.7 |
| CVE-2022-3602 | 7.5 | Nov 1 | X.509 Email Address 4-byte Buffer Overflow Affected: Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6) |
| CVE-2022-3358 | 7.5 | Oct 11 | Using a Custom Cipher with NID_undef may lead to NULL encryption Affected: Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5) |
| CVE-2022-1473 | 7.5 | May 3 | Resource leakage when decoding certificates and keys Affected: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2) |
| CVE-2022-0778 | 7.5 | Mar 15 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates Affected: Fixed in OpenSSL 3.0.2 (Affected 3.0.0,3.0.1); Fixed in OpenSSL 1.1.1n (Affected 1.1.1-1.1.1m); Fixed in OpenSSL 1.0.2zd (Affected 1.0.2-1.0.2zc) |
| CVE-2021-4044 | 7.5 | Dec 14 | Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server Affected: before 1.0.2; 1.1.0; 3.0.0 |
| CVE-2021-23840 | 7.5 | Feb 16 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… Affected: 1.0.2 before 1.0.2y; 1.1.1 before 1.1.1j |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f) |
| CVE-2018-0732 | 7.5 | Jun 12 | Client DoS due to large DH parameter Affected: Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h); Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o) |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 1.0.2 through 1.0.2h; 0.9.8; 1.0.1; 1.1.0 |
| CVE-2017-3733 | 7.5 | May 4 | During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0… Affected: 1.1.0; 1.1.0a; 1.1.0b; 1.1.0c; 1.1.0d |
| CVE-2017-3731 | 7.5 | May 4 | If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an… Affected: 1.1.0a; 1.1.0b; 1.1.0c; 1.0.2; 1.0.2; 1.0.2; +10 more |
| CVE-2017-3730 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL… Affected: 1.1.0; 1.1.0a; 1.1.0b; 1.1.0c |
| CVE-2016-7054 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads Affected: 1.1.0; 1.1.0a; 1.1.0b |
| CVE-2016-7053 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference Affected: 1.1.0; 1.1.0a; 1.1.0b |
| CVE-2016-7052 | 7.5 | Sep 26 | crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation Affected: 1.0.2i |
| CVE-2016-6305 | 7.5 | Sep 26 | The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a… Affected: 1.1.0 |
| CVE-2016-6304 | 7.5 | Sep 26 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption)… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; 1.0.2b; +30 more |
| CVE-2016-6302 | 7.5 | Sep 16 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2181 | 7.5 | Sep 16 | The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2179 | 7.5 | Sep 16 | The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2183 | 7.5 | Sep 1 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which… Affected: 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; 1.0.1f; +20 more |
| CVE-2016-2180 | 7.5 | Aug 1 | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2109 | 7.5 | May 5 | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial… Affected: through 1.0.1s; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +6 more |
| CVE-2016-2106 | 7.5 | May 5 | Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Affected: through 1.0.1s; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +6 more |
| CVE-2016-2105 | 7.5 | May 5 | Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +28 more |
| CVE-2000-1254 | 7.5 | May 5 | crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat… Affected: through 0.9.5 |
| CVE-2016-0798 | 7.5 | Mar 3 | Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more |
| CVE-2016-0797 | 7.5 | Mar 3 | Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more |
| CVE-2015-3194 | 7.5 | Dec 6 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +16 more |
| CVE-2015-3193 | 7.5 | Dec 6 | The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry… Affected: 1.0.2; 1.0.2a; 1.0.2b; 1.0.2c; 1.0.2d |
| CVE-2015-1789 | 7.5 | Jun 12 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause… Affected: through 0.9.8zf; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +34 more |
| CVE-2008-0166 | 7.5 | May 13 | OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for… Affected: 0.9.8c-1 through 0.9.8g |
| CVE-2005-2946 | 7.5 | Sep 16 | The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote… Affected: before 0.9.8 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 0.9.6c; 0.9.6d; 0.9.6e; 0.9.6f; 0.9.6g; 0.9.6h; +10 more |
| CVE-2026-34181 | 7.4 | Jun 9 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6 |
| CVE-2025-69419 | 7.4 | Jan 27 | Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze |
| CVE-2023-0286 | 7.4 | Feb 8 | X.400 address type confusion in X.509 GeneralName Affected: 3.0.0 before 3.0.8; 1.1.1 before 1.1.1t; 1.0.2 before 1.0.2zg |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 1.0.2 before 1.0.2za; 1.1.1 before 1.1.1l |