Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 7.5
    CVE-2005-2946 The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorith…
    OpenSSL
  2. 5.1
    CVE-2005-1797 The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box loo…
    OpenSSL
  3. 2.1
    CVE-2004-0975 The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwr…
    OpenSSL
  4. 5.0
    CVE-2004-0112 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of…
    OpenSSLCisco IOS
    EPSS 10.4% chance of exploitation in 30 days, percentile 95%
  5. 5.0
    CVE-2004-0081 OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (inf…
    OpenSSLCisco IOS
    EPSS 7.2% chance of exploitation in 30 days, percentile 94%
  6. 7.5
    CVE-2004-0079 The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service…
    OpenSSLCisco IOS
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  7. 5.0
    CVE-2003-0851 OpenSSL 0.9.6k allows remote attackers to cause a denial of service (crash via large recursion) via malformed ASN.1 sequences.
    OpenSSLCisco IOS
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  8. 5.0
    CVE-2002-1568 OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to c…
    OpenSSL
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  9. 9.8
    CVE-2003-0545 Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code…
    OpenSSL
    EPSS 87.5% chance of exploitation in 30 days, percentile 99.7%
  10. 5.0
    CVE-2003-0544 OpenSSL 0.9.6 and 0.9.7 does not properly track the number of characters in certain ASN.1 inputs, which allows remote attackers to cause a…
    OpenSSL
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  11. 5.0
    CVE-2003-0543 Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote attackers to cause a denial of service (crash) via an SSL client certificate with…
    OpenSSL
    1 public exploit EPSS 27.4% chance of exploitation in 30 days, percentile 98%
  12. 7.5
    CVE-2003-0131 The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private…
    OpenSSL
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  13. 5.0
    CVE-2003-0147 OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining fac…
    OpenSSL
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  14. 5.0
    CVE-2003-0078 ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block ciph…
    OpenSSL
    1 public exploit EPSS 13.7% chance of exploitation in 30 days, percentile 96%
  15. 5.0
    CVE-2002-0659 The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via inval…
    OpenSSL
    1 public exploit EPSS 36.2% chance of exploitation in 30 days, percentile 98%
  16. 7.5
    CVE-2002-0657 Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master ke…
    OpenSSL
    EPSS 9.2% chance of exploitation in 30 days, percentile 95%
  17. 7.5
    CVE-2002-0656 Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a lar…
    OpenSSL
    1 public exploit EPSS 89.8% chance of exploitation in 30 days, percentile 99.7%
  18. 7.5
    CVE-2002-0655 OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, wh…
    OpenSSL
    EPSS 8.2% chance of exploitation in 30 days, percentile 94%
  19. 5.0
    CVE-2001-1141 The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to…
    OpenSSL
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  20. 5.0
    CVE-2000-0535 OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent…
    OpenSSL
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  21. 7.5
    CVE-1999-0428 OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.
    OpenSSL
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%