OP
Product
OpenSSL
On CISA KEVExploited in the wild
322
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 88Medium 78Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1791 | – | Jun 12 | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used… Affected: through 0.9.8zf; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +34 more |
| CVE-2015-1790 | – | Jun 12 | The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to… Affected: through 0.9.8zf; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +34 more |
| CVE-2015-1788 | – | Jun 12 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle… Affected: through 0.9.8zf; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +34 more |
| CVE-2014-8176 | – | Jun 12 | The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application… Affected: through 0.9.8z; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +24 more |
| CVE-2015-1787 | – | Mar 19 | The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0293 | – | Mar 19 | The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0292 | – | Mar 19 | Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before… Affected: through 0.9.8z; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +16 more |
| CVE-2015-0291 | – | Mar 19 | The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0290 | – | Mar 19 | The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0289 | – | Mar 19 | The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0288 | – | Mar 19 | The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0287 | – | Mar 19 | The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0286 | – | Mar 19 | The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0285 | – | Mar 19 | The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a handshake, which makes it easier for… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0209 | – | Mar 19 | Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a… Affected: through 0.9.8ze; 1.0.0; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; +27 more |
| CVE-2015-0208 | – | Mar 19 | The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0207 | – | Mar 19 | The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data streams, which allows remote attackers to… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2 |
| CVE-2015-0206 | – | Jan 9 | Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory… Affected: 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; 1.0.0f; +19 more |
| CVE-2015-0205 | – | Jan 9 | The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without… Affected: 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; 1.0.0f; +19 more |
| CVE-2014-8275 | – | Jan 9 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a… Affected: through 0.9.8zc; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; +20 more |
| CVE-2014-3572 | – | Jan 9 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH… Affected: through 0.9.8zc; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; +20 more |
| CVE-2014-3571 | – | Jan 9 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: through 0.9.8zc; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; +20 more |
| CVE-2014-3570 | – | Jan 9 | The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it… Affected: through 0.9.8zc; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; +20 more |
| CVE-2015-0204 | – | Jan 9 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA… Affected: through 0.9.8zc; 1.0.0a; 1.0.0b; 1.0.0c; 1.0.0d; 1.0.0e; +20 more |
| CVE-2014-3569 | – | Dec 24 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote… Affected: 1.0.1j |
| CVE-2014-3568 | – | Oct 19 | OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access… Affected: through 0.9.8zb; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +28 more |
| CVE-2014-3567 | – | Oct 19 | Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of… Affected: through 0.9.8zb; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +28 more |
| CVE-2014-3513 | – | Oct 19 | Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +7 more |
| CVE-2014-5139 | – | Aug 13 | The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +6 more |
| CVE-2014-3512 | – | Aug 13 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash)… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +25 more |
| CVE-2014-3511 | – | Aug 13 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +25 more |
| CVE-2014-3510 | – | Aug 13 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2014-3509 | – | Aug 13 | Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +25 more |
| CVE-2014-3508 | – | Aug 13 | The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2014-3507 | – | Aug 13 | Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2014-3506 | – | Aug 13 | d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2014-3505 | – | Aug 13 | Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2014-3470 | – | Jun 5 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used,… Affected: before 0.9.8za; 1.0.0 before 1.0.0m; 1.0.1 before 1.0.1h |
| CVE-2014-0221 | – | Jun 5 | The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service… Affected: 0.9.8 before 0.9.8za; 1.0.0 before 1.0.0m; 1.0.1 before 1.0.1h |
| CVE-2014-0195 | – | Jun 5 | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS… Affected: 0.9.8 before 0.9.8za; 1.0.0 before 1.0.0m; 1.0.1 before 1.0.1h |
| CVE-2014-0198 | – | May 6 | The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive… Affected: 1.0.0 through 1.0.1g |
| CVE-2010-5298 | – | Apr 14 | Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across… Affected: through 1.0.1g |
| CVE-2014-0076 | – | Mar 25 | The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to… Affected: through 1.0.0l; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2013-4353 | – | Jan 9 | The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash)… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +3 more |
| CVE-2013-6450 | – | Jan 1 | The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which… Affected: 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +19 more |
| CVE-2013-6449 | – | Dec 23 | The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a… Affected: through 1.0.1e; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +19 more |
| CVE-2013-0169 | – | Feb 8 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on… Affected: 0.9.8 through 0.9.8x; 1.0.0 through 1.0.0j; 1.0.1 through 1.0.1d |
| CVE-2013-0166 | – | Feb 8 | OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; 0.9.5; +34 more |
| CVE-2012-2686 | – | Feb 8 | crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of… Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c |
| CVE-2011-5095 | – | Jun 20 | The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter, which makes it easier for… Affected: 0.9.8 |