Browse CVEs

MEDIUM 6.1 CVE-2025-11187 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL poi… OpenSSL 3.4.4 / 3.5.5+ Fix from $1,6002026-01-27 MEDIUM 5.9 CVE-2025-15468 Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the p… OpenSSL 3.3.6 / 3.4.4+ Fix from $1,6002026-01-27 MEDIUM 5.5 CVE-2025-15469 Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success … OpenSSL 3.5.5 / 3.6.1+ Fix from $1,6002026-01-27 MEDIUM 6.5 CVE-2025-4575 Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact sum… OpenSSL Patch available Fix from $1,6002025-05-22 HIGH 7.5 CVE-2024-6119EPSS 67% Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory… OpenSSL 3.0.15 / 3.1.7+ Fix from $1,9502024-09-03 MEDIUM 5.5 CVE-2024-0727 Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summa… OpenSSL 1.0.2zj / 1.1.1x+ Fix from $1,6002024-01-26 MEDIUM 6.5 CVE-2023-6129 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications run… OpenSSL after 3.1.4 Fix from $1,6002024-01-09 MEDIUM 5.3 CVE-2023-5678 Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: … OpenSSL 1.0.2zj / 1.1.1x+ Fix from $1,6002023-11-06 HIGH 7.5 CVE-2023-5363 Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or o… OpenSSL 3.0.12 / 3.1.4+ Fix from $1,9502023-10-25 HIGH 7.8 CVE-2023-4807 Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on … OpenSSL 1.1.1w / 3.0.11+ Fix from $1,9502023-09-08 MEDIUM 5.3 CVE-2023-3817 Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_… OpenSSL 3.0.10 / 3.1.2+ Fix from $1,6002023-07-31 MEDIUM 5.3 CVE-2023-3446EPSS 7% Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_… OpenSSL Patch available Fix from $1,6002023-07-19 MEDIUM 5.3 CVE-2023-2975 Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a… OpenSSL after 3.1.1 Fix from $1,6002023-07-14 MEDIUM 6.5 CVE-2023-2650EPSS 75% Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications tha… OpenSSL 1.0.2zh / 1.1.1u+ Fix from $1,6002023-05-30 MEDIUM 5.9 CVE-2023-1255 Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer,… OpenSSL 3.0.9 / 3.1.1+ Fix from $1,6002023-04-20 MEDIUM 5.3 CVE-2023-0465 Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain check… OpenSSL 1.0.2zh / 1.1.1u+ Fix from $1,6002023-03-28 MEDIUM 5.3 CVE-2023-0466 The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. How… OpenSSL 1.0.2zh / 1.1.1u+ Fix from $1,6002023-03-28 HIGH 7.5 CVE-2023-0464 A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that inclu… OpenSSL 1.0.2zh / 1.1.1u+ Fix from $1,9502023-03-22 HIGH 7.5 CVE-2023-0215 The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to supp… OpenSSL 1.0.2zg / 1.1.1t+ Fix from $1,9502023-02-08 HIGH 7.5 CVE-2023-0216 An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() … OpenSSL 3.3.3+ Fix from $1,9502023-02-08 HIGH 7.5 CVE-2023-0217 An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP_PKEY_public_check() … OpenSSL after 3.0.7 Fix from $1,9502023-02-08 HIGH 7.5 CVE-2023-0401 A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for… OpenSSL 3.3.3+ Fix from $1,9502023-02-08 HIGH 7.4 CVE-2023-0286EPSS 60% There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRI… OpenSSL 1.0.2zg / 1.1.1t+ Fix from $1,9502023-02-08 HIGH 7.5 CVE-2022-4450EPSS 20% The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload da… OpenSSL 1.1.1t / 3.0.8+ Fix from $1,9502023-02-08 MEDIUM 5.9 CVE-2022-4304EPSS 16% A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in … OpenSSL 1.0.2zg / 1.1.1t+ Fix from $1,6002023-02-08 HIGH 7.5 CVE-2022-3996 If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. … OpenSSL after 3.0.7 Fix from $1,9502022-12-13 HIGH 7.5 CVE-2022-3786EPSS 92% A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificat… OpenSSL 3.0.7 / 18.11.0+ Fix from $1,9502022-11-01 HIGH 7.5 CVE-2022-3602EPSS 91% A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificat… OpenSSL 3.0.7 / 18.11.0+ Fix from $1,9502022-11-01 HIGH 7.5 CVE-2022-3358 OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated i… OpenSSL 3.0.6+ Fix from $1,9502022-10-11 MEDIUM 5.3 CVE-2022-2097 AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circums… OpenSSL 1.1.1q / 3.0.5+ Fix from $1,6002022-07-05