OP
Product
OpenSSL
On CISA KEVExploited in the wild
322
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 88Medium 78Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-2937 | – | Sep 28 | OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +10 more |
| CVE-2006-2940 | – | Sep 28 | OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1)… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; 0.9.5; +34 more |
| CVE-2006-4339 | – | Sep 5 | OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote… Affected: through 0.9.7; 0.9.1c; 0.9.2b; 0.9.3; 0.9.3a; 0.9.4; +34 more |
| CVE-2005-2969 | – | Oct 18 | The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING option, disables a verification step that is… Affected: 0.9.7; 0.9.7a; 0.9.7b; 0.9.7c; 0.9.7d; 0.9.7e; +3 more |
| CVE-2005-1797 | – | May 26 | The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +22 more |
| CVE-2004-0975 | – | Feb 9 | The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on… Affected: 0.9.6; 0.9.6a; 0.9.6b; 0.9.6c; 0.9.6d; 0.9.6e; +10 more |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 0.9.6c; 0.9.6d; 0.9.6e; 0.9.6f; 0.9.6g; 0.9.6h; +10 more |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 0.9.6c; 0.9.6d; 0.9.6e; 0.9.6f; 0.9.6g; 0.9.6h; +10 more |
| CVE-2003-0851 | – | Dec 1 | OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences Affected: 0.9.6; 0.9.6a; 0.9.6b; 0.9.6c; 0.9.6d; 0.9.6e; +9 more |
| CVE-2003-0544 | – | Nov 17 | OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a denial of service (crash) via an SSL… Affected: 0.9.6; 0.9.7 |
| CVE-2003-0543 | – | Nov 17 | Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values Affected: 0.9.6; 0.9.7 |
| CVE-2002-1568 | – | Nov 17 | OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via… Affected: 0.9.6e |
| CVE-2003-0147 | – | Mar 31 | OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the… Affected: 0.9.6; 0.9.6a; 0.9.6b; 0.9.6c; 0.9.6d; 0.9.6e; +5 more |
| CVE-2003-0131 | – | Mar 24 | The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified… Affected: 0.9.6; 0.9.6a; 0.9.6b; 0.9.6c; 0.9.6d; 0.9.6e; +5 more |
| CVE-2003-0078 | – | Mar 3 | ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an… Affected: before 0.9.6i; 0.9.6i; 0.9.7; 0.9.7; 0.9.7; 0.9.7; +3 more |
| CVE-2002-0657 | – | Aug 12 | Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key Affected: 0.9.7; 0.9.7 |
| CVE-2002-0659 | – | Aug 12 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +7 more |
| CVE-2002-0655 | – | Aug 12 | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +7 more |
| CVE-2002-0656 | – | Aug 12 | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.5a; +7 more |
| CVE-2001-1141 | – | Jul 10 | The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state… Affected: 0.9.1c; 0.9.2b; 0.9.3; 0.9.4; 0.9.5; 0.9.6; +1 more |
| CVE-2000-0535 | – | Jun 12 | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes… Affected: 0.9.4 |
| CVE-1999-0428 | – | Mar 22 | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls Affected: before 0.9.2b |