Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 2.6
    CVE-2013-0169 The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly…
    OpenSSL
    EPSS 35.6% chance of exploitation in 30 days, percentile 98%
  2. 5.0
    CVE-2013-0166 OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, wh…
    OpenSSL
    EPSS 19.7% chance of exploitation in 30 days, percentile 97%
  3. 5.0
    CVE-2012-2686 crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows r…
    OpenSSL
    1 public exploit EPSS 39.6% chance of exploitation in 30 days, percentile 98%
  4. 4.0
    CVE-2011-5095 The Diffie-Hellman key-exchange implementation in OpenSSL 0.9.8, when FIPS mode is enabled, does not properly validate a public parameter,…
    OpenSSL
    EPSS 2.1% chance of exploitation in 30 days, percentile 81%
  5. 5.0
    CVE-2011-1473 OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols,…
    OpenSSL
    EPSS 66.9% chance of exploitation in 30 days, percentile 99.3%
  6. 6.8
    CVE-2012-2333 Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC e…
    OpenSSL
    EPSS 27.9% chance of exploitation in 30 days, percentile 98%
  7. 7.5
    CVE-2012-2131 Multiple integer signedness errors in crypto/buffer/buffer.c in OpenSSL 0.9.8v allow remote attackers to conduct buffer overflow attacks, a…
    OpenSSL
    1 public exploit EPSS 16.8% chance of exploitation in 30 days, percentile 97%
  8. 7.5
    CVE-2012-2110 The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not pr…
    OpenSSL
    1 public exploit EPSS 47.9% chance of exploitation in 30 days, percentile 98%
  9. 5.0
    CVE-2012-1165 The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a den…
    OpenSSL
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  10. 5.0
    CVE-2012-0884 The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restr…
    OpenSSL
    EPSS 13.2% chance of exploitation in 30 days, percentile 96%
  11. 5.0
    CVE-2006-7250 The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NUL…
    OpenSSL
    EPSS 6.7% chance of exploitation in 30 days, percentile 94%
  12. 5.8
    CVE-2011-4354 crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving…
    OpenSSL
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  13. 5.0
    CVE-2012-0050 OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) v…
    OpenSSL
    EPSS 13.7% chance of exploitation in 30 days, percentile 96%
  14. 5.0
    CVE-2012-0027 The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attacke…
    OpenSSL
    EPSS 4.8% chance of exploitation in 30 days, percentile 92%
  15. 5.0
    CVE-2011-4619 The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restar…
    OpenSSL
    EPSS 17.8% chance of exploitation in 30 days, percentile 97%
  16. 4.3
    CVE-2011-4577 OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assert…
    OpenSSL
    EPSS 8.2% chance of exploitation in 30 days, percentile 94%
  17. 5.0
    CVE-2011-4576 The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher pad…
    OpenSSL
    EPSS 14.4% chance of exploitation in 30 days, percentile 96%
  18. 9.3
    CVE-2011-4109 Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unsp…
    OpenSSL
    EPSS 16.9% chance of exploitation in 30 days, percentile 97%
  19. 4.3
    CVE-2011-4108 The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes i…
    OpenSSL
    EPSS 16.1% chance of exploitation in 30 days, percentile 96%
  20. 5.0
    CVE-2011-3210 The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during p…
    OpenSSL
    EPSS 4.6% chance of exploitation in 30 days, percentile 91%
  21. 5.0
    CVE-2011-3207 crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attac…
    OpenSSL
    EPSS 4.4% chance of exploitation in 30 days, percentile 91%
  22. 2.6
    CVE-2011-1945 The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA)…
    OpenSSL
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  23. 5.0
    CVE-2011-0014 ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and po…
    OpenSSL
    EPSS 9.9% chance of exploitation in 30 days, percentile 95%
  24. 4.3
    CVE-2008-7270 OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the ses…
    OpenSSL
    EPSS 3.4% chance of exploitation in 30 days, percentile 89%
  25. 7.5
    CVE-2010-4252 OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote…
    OpenSSL
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  26. 4.3
    CVE-2010-4180 OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modifica…
    nginxOpenSSL
    EPSS 9.5% chance of exploitation in 30 days, percentile 95%
  27. 7.6
    CVE-2010-3864 Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are…
    OpenSSL
    EPSS 22.1% chance of exploitation in 30 days, percentile 97%
  28. 4.3
    CVE-2010-2939 Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and…
    OpenSSL
    1 public exploit EPSS 10.0% chance of exploitation in 30 days, percentile 95%
  29. 6.4
    CVE-2010-1633 RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other appli…
    OpenSSL
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  30. 7.5
    CVE-2010-0742 The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not prop…
    OpenSSL
    EPSS 7.8% chance of exploitation in 30 days, percentile 94%