Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 5.0
    CVE-2010-0740 The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash)…
    OpenSSL
    1 public exploit EPSS 20.4% chance of exploitation in 30 days, percentile 97%
  2. 4.0
    CVE-2010-0928 OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for cer…
    OpenSSL
  3. 4.3
    CVE-2010-0433 The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files can…
    OpenSSL
    EPSS 7.9% chance of exploitation in 30 days, percentile 94%
  4. 10.0
    CVE-2009-3245 OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2) crypto/bn/bn_gf2…
    OpenSSL
    EPSS 5.8% chance of exploitation in 30 days, percentile 93%
  5. 5.0
    CVE-2009-4355 Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows…
    OpenSSL
    EPSS 9.2% chance of exploitation in 30 days, percentile 95%
  6. 9.8
    CVE-2009-3555 Apache Tomcat affected by vulnerability in TLS and SSL protocol
    nginxApache HTTP ServerOpenSSLmaven
    2 public exploits EPSS 87.3% chance of exploitation in 30 days, percentile 99.7%
  7. 5.1
    CVE-2009-2409 The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k;…
    OpenSSL
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  8. 5.0
    CVE-2009-1387 The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of…
    OpenSSL
    EPSS 10.3% chance of exploitation in 30 days, percentile 95%
  9. 5.0
    CVE-2009-1386 ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via…
    OpenSSL
    2 public exploits EPSS 80.1% chance of exploitation in 30 days, percentile 99.6%
  10. 5.0
    CVE-2009-1379 Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attack…
    OpenSSL
    1 public exploit EPSS 18.2% chance of exploitation in 30 days, percentile 97%
  11. 5.0
    CVE-2009-1378 Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow…
    OpenSSL
    EPSS 12.7% chance of exploitation in 30 days, percentile 96%
  12. 5.0
    CVE-2009-1377 The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of…
    OpenSSL
    EPSS 11.3% chance of exploitation in 30 days, percentile 96%
  13. 5.0
    CVE-2009-0789 OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attack…
    OpenSSL
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  14. 2.6
    CVE-2009-0591 The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed si…
    OpenSSL
    EPSS 2.8% chance of exploitation in 30 days, percentile 86%
  15. 5.0
    CVE-2009-0590 The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and…
    OpenSSL
    EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  16. 7.5
    CVE-2009-0653 OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to…
    OpenSSL
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  17. 5.8
    CVE-2008-5077 OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to byp…
    OpenSSL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  18. 5.0
    CVE-2008-1678 Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers t…
    OpenSSL
    EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  19. 4.3
    CVE-2008-1672 OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchan…
    OpenSSL
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  20. 4.3
    CVE-2008-0891 Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a…
    OpenSSL
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  21. 7.5
    CVE-2008-0166 OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable…
    OpenSSL
    3 public exploits EPSS 70.7% chance of exploitation in 30 days, percentile 99.4%
  22. 9.3
    CVE-2007-4995 Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote attackers to execute arbitrary code via unspecifie…
    OpenSSL
    EPSS 10.5% chance of exploitation in 30 days, percentile 95%
  23. 6.8
    CVE-2007-5135 Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers…
    OpenSSL
    EPSS 16.1% chance of exploitation in 30 days, percentile 96%
  24. 1.2
    CVE-2007-3108 The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, w…
    OpenSSL
  25. 4.3
    CVE-2006-4343 The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows rem…
    OpenSSL
    2 public exploits EPSS 19.4% chance of exploitation in 30 days, percentile 97%
  26. 10.0
    CVE-2006-3738 Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspec…
    OpenSSL
    EPSS 49.9% chance of exploitation in 30 days, percentile 98%
  27. 7.8
    CVE-2006-2940 OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via…
    OpenSSL
    EPSS 5.1% chance of exploitation in 30 days, percentile 92%
  28. 7.8
    CVE-2006-2937 OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumpt…
    OpenSSL
    EPSS 11.0% chance of exploitation in 30 days, percentile 95%
  29. 9.1
    CVE-2006-4339 Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
    OpenSSL
    EPSS 3.9% chance of exploitation in 30 days, percentile 90%
  30. 5.0
    CVE-2005-2969 The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING opti…
    OpenSSL
    EPSS 4.9% chance of exploitation in 30 days, percentile 92%