OP
Product
OpenSSL
On CISA KEVExploited in the wild
322
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 88Medium 78Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-23840 | 7.5 | Feb 16 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… Affected: 1.0.2 before 1.0.2y; 1.1.1 before 1.1.1j |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f) |
| CVE-2018-0732 | 7.5 | Jun 12 | Client DoS due to large DH parameter Affected: Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h); Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o) |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: 1.0.2 through 1.0.2h; 0.9.8; 1.0.1; 1.1.0 |
| CVE-2017-3733 | 7.5 | May 4 | During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0… Affected: 1.1.0; 1.1.0a; 1.1.0b; 1.1.0c; 1.1.0d |
| CVE-2017-3731 | 7.5 | May 4 | If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an… Affected: 1.1.0a; 1.1.0b; 1.1.0c; 1.0.2; 1.0.2; 1.0.2; +10 more |
| CVE-2017-3730 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL… Affected: 1.1.0; 1.1.0a; 1.1.0b; 1.1.0c |
| CVE-2016-7054 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads Affected: 1.1.0; 1.1.0a; 1.1.0b |
| CVE-2016-7053 | 7.5 | May 4 | In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference Affected: 1.1.0; 1.1.0a; 1.1.0b |
| CVE-2016-7052 | 7.5 | Sep 26 | crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation Affected: 1.0.2i |
| CVE-2016-6305 | 7.5 | Sep 26 | The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a… Affected: 1.1.0 |
| CVE-2016-6304 | 7.5 | Sep 26 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption)… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; 1.0.2b; +30 more |
| CVE-2016-6302 | 7.5 | Sep 16 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2181 | 7.5 | Sep 16 | The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2179 | 7.5 | Sep 16 | The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2183 | 7.5 | Sep 1 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which… Affected: 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; 1.0.1f; +20 more |
| CVE-2016-2180 | 7.5 | Aug 1 | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more |
| CVE-2016-2109 | 7.5 | May 5 | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial… Affected: through 1.0.1s; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +6 more |
| CVE-2016-2106 | 7.5 | May 5 | Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Affected: through 1.0.1s; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +6 more |
| CVE-2016-2105 | 7.5 | May 5 | Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +28 more |
| CVE-2000-1254 | 7.5 | May 5 | crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat… Affected: through 0.9.5 |
| CVE-2016-0798 | 7.5 | Mar 3 | Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more |
| CVE-2016-0797 | 7.5 | Mar 3 | Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more |
| CVE-2015-3194 | 7.5 | Dec 6 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +16 more |
| CVE-2015-3193 | 7.5 | Dec 6 | The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry… Affected: 1.0.2; 1.0.2a; 1.0.2b; 1.0.2c; 1.0.2d |
| CVE-2015-1789 | 7.5 | Jun 12 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause… Affected: through 0.9.8zf; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +34 more |
| CVE-2008-0166 | 7.5 | May 13 | OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for… Affected: 0.9.8c-1 through 0.9.8g |
| CVE-2005-2946 | 7.5 | Sep 16 | The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote… Affected: before 0.9.8 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 0.9.6c; 0.9.6d; 0.9.6e; 0.9.6f; 0.9.6g; 0.9.6h; +10 more |
| CVE-2026-34181 | 7.4 | Jun 9 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6 |
| CVE-2025-69419 | 7.4 | Jan 27 | Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze |
| CVE-2023-0286 | 7.4 | Feb 8 | X.400 address type confusion in X.509 GeneralName Affected: 3.0.0 before 3.0.8; 1.1.1 before 1.1.1t; 1.0.2 before 1.0.2zg |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 1.0.2 before 1.0.2za; 1.1.1 before 1.1.1l |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j) |
| CVE-2019-1543 | 7.4 | Mar 6 | ChaCha20-Poly1305 with long nonces Affected: Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b); Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j) |
| CVE-2014-0224 | 7.4 | Jun 5 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers… Affected: before 0.9.8za; 1.0.0 before 1.0.0m; 1.0.1 before 1.0.1h |
| CVE-2022-2068 | 7.3 | Jun 21 | The c_rehash script allows command injection Affected: Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3); Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o); Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze) |
| CVE-2022-1292 | 7.3 | May 3 | The c_rehash script allows command injection Affected: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2); Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n); Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd) |