Browse CVEs

CRITICAL 9.8 CVE-2022-2274EPSS 45% The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes… OpenSSL No fix yet Fix from $2,3002022-07-01 HIGH 7.3 CVE-2022-2068EPSS 96% In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sa… OpenSSL 1.0 / 1.0.2zf+ Fix from $1,9502022-06-21 HIGH 7.5 CVE-2022-1473 The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entri… OpenSSL 3.0.3+ Fix from $1,9502022-05-03 HIGH 7.3 CVE-2022-1292EPSS 83% The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating system… OpenSSL 1.0.2ze / 1.1.1o+ Fix from $1,9502022-05-03 MEDIUM 5.9 CVE-2022-1434 The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable.… OpenSSL 3.0.3+ Fix from $1,6002022-05-03 MEDIUM 5.3 CVE-2022-1343 The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used … OpenSSL 3.0.3+ Fix from $1,6002022-05-03 HIGH 7.5 CVE-2022-0778EPSS 73% The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally t… OpenSSL 1.0.2zd / 1.1.1n+ Fix from $1,9502022-03-15 MEDIUM 5.9 CVE-2021-4160 There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default … OpenSSL 1.0 / 1.1.1m+ Fix from $1,6002022-01-28 HIGH 7.5 CVE-2021-4044EPSS 50% Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a neg… OpenSSL 1.0.2 / 17.3.0+ Fix from $1,9502021-12-14 CRITICAL 9.8 CVE-2021-3711EPSS 88% In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call thi… OpenSSL 1.1.1l+ Fix from $2,3002021-08-24 HIGH 7.4 CVE-2021-3712EPSS 50% ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holdi… OpenSSL 1.0.2za / 1.1.1l+ Fix from $1,9502021-08-24 HIGH 7.4 CVE-2021-3450EPSS 18% The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Sta… OpenSSL 1.1.1k / 10.24.1+ Fix from $1,9502021-03-25 MEDIUM 5.9 CVE-2021-3449EPSS 63% An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello… OpenSSL 1.1.1k / 12.22.1+ Fix from $1,6002021-03-25 HIGH 7.5 CVE-2021-23840EPSS 51% Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is cl… OpenSSL 1.0.2y / 1.1.1j+ Fix from $1,9502021-02-16 MEDIUM 5.9 CVE-2021-23841EPSS 7% The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data conta… OpenSSL 1.0.2y / 1.1.1j+ Fix from $1,6002021-02-16 MEDIUM 5.9 CVE-2020-1971EPSS 7% The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL pro… OpenSSL 1.0.2x / 1.1.1i+ Fix from $1,6002020-12-08 HIGH 7.5 CVE-2020-1967EPSS 53% Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereferenc… OpenSSL after 8.0.20 Fix from $1,9502020-04-21 MEDIUM 5.3 CVE-2019-1551EPSS 14% There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analy… OpenSSL after 8.0.20 Fix from $1,6002019-12-06 MEDIUM 5.9 CVE-2019-1559EPSS 17% If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then O… OpenSSL 1.0.2r+ Fix from $1,6002019-02-27 MEDIUM 5.9 CVE-2018-0734EPSS 12% The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing … OpenSSL 6.15.0 / 8.14.0+ Fix from $1,6002018-10-30 MEDIUM 5.9 CVE-2018-0735 The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signin… OpenSSL 10.12.0 / 11.3.0+ Fix from $1,6002018-10-29 HIGH 7.5 CVE-2016-8610EPSS 40% A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALE… OpenSSL after 1.0.2h Fix from $1,9502017-11-13 HIGH 7.5 CVE-2017-3730EPSS 55% In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client atte… OpenSSL Patch available Fix from $1,9502017-05-04 HIGH 7.5 CVE-2017-3733EPSS 13% During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this… OpenSSL Patch available Fix from $1,9502017-05-04 HIGH 7.5 CVE-2016-7052EPSS 30% crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by tri… OpenSSL 4.6.0 / 6.7.0+ Fix from $1,9502016-09-26 MEDIUM 5.9 CVE-2016-6306EPSS 42% The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read… OpenSSL 0.10.47 / 0.12.16+ Fix from $1,6002016-09-26 HIGH 7.5 CVE-2016-6304EPSS 63% Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of … OpenSSL 0.10.47 / 0.12.16+ Fix from $1,9502016-09-26 HIGH 7.5 CVE-2016-6302EPSS 26% The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which… OpenSSL Patch available Fix from $1,9502016-09-16 CRITICAL 9.8 CVE-2016-2182EPSS 44% The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to … OpenSSL Mitigation only Fix from $2,3002016-09-16 HIGH 7.5 CVE-2016-2181EPSS 23% The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large seq… OpenSSL Mitigation only Fix from $1,9502016-09-16