Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2015-0204 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL s…
    OpenSSL
    EPSS 98.7% chance of exploitation in 30 days, percentile 99.9%
  2. 5.0
    CVE-2014-8275 OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows…
    OpenSSL
    EPSS 15.0% chance of exploitation in 30 days, percentile 96%
  3. 5.0
    CVE-2014-3572 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL s…
    OpenSSL
    EPSS 6.2% chance of exploitation in 30 days, percentile 93%
  4. 5.0
    CVE-2014-3571 OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer der…
    OpenSSL
    EPSS 22.1% chance of exploitation in 30 days, percentile 97%
  5. 5.0
    CVE-2014-3570 The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of…
    OpenSSL
    EPSS 21.9% chance of exploitation in 30 days, percentile 97%
  6. 5.0
    CVE-2014-3569 The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupport…
    OpenSSL
    EPSS 19.5% chance of exploitation in 30 days, percentile 97%
  7. 4.3
    CVE-2014-3568 OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remot…
    OpenSSL
    EPSS 14.0% chance of exploitation in 30 days, percentile 96%
  8. 7.1
    CVE-2014-3567 Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows r…
    OpenSSL
    EPSS 22.7% chance of exploitation in 30 days, percentile 97%
  9. 7.1
    CVE-2014-3513 Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (me…
    OpenSSL
    EPSS 37.1% chance of exploitation in 30 days, percentile 98%
  10. 3.4
    CVE-2014-3566 The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for ma…
    OpenSSLOracle Database
    1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 100%
  11. 4.3
    CVE-2014-5139 The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NUL…
    OpenSSL
    EPSS 16.3% chance of exploitation in 30 days, percentile 97%
  12. 7.5
    CVE-2014-3512 Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause…
    OpenSSL
    EPSS 74.1% chance of exploitation in 30 days, percentile 99.4%
  13. 4.3
    CVE-2014-3511 The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS…
    OpenSSL
    EPSS 14.1% chance of exploitation in 30 days, percentile 96%
  14. 4.3
    CVE-2014-3510 The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allow…
    OpenSSL
    EPSS 18.4% chance of exploitation in 30 days, percentile 97%
  15. 6.8
    CVE-2014-3509 Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multit…
    OpenSSL
    EPSS 12.9% chance of exploitation in 30 days, percentile 96%
  16. 4.3
    CVE-2014-3508 The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pr…
    OpenSSL
    EPSS 24.5% chance of exploitation in 30 days, percentile 97%
  17. 5.0
    CVE-2014-3507 Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows re…
    OpenSSL
    EPSS 55.1% chance of exploitation in 30 days, percentile 99%
  18. 5.0
    CVE-2014-3506 d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers…
    OpenSSL
    EPSS 46.1% chance of exploitation in 30 days, percentile 98%
  19. 5.0
    CVE-2014-3505 Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.…
    OpenSSL
    EPSS 46.1% chance of exploitation in 30 days, percentile 98%
  20. 4.3
    CVE-2014-3470 The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an an…
    OpenSSLMariaDB
    EPSS 85.8% chance of exploitation in 30 days, percentile 99.7%
  21. 7.4
    CVE-2014-0224 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, wh…
    Node.jsOpenSSLMariaDB
    1 public exploit EPSS 95.3% chance of exploitation in 30 days, percentile 99.8%
  22. 4.3
    CVE-2014-0221 The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote…
    OpenSSLMariaDB
    EPSS 87.9% chance of exploitation in 30 days, percentile 99.7%
  23. 6.8
    CVE-2014-0195 The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not proper…
    OpenSSLMariaDB
    1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  24. 4.3
    CVE-2014-0198 The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a…
    OpenSSLMariaDB
    EPSS 40.3% chance of exploitation in 30 days, percentile 98%
  25. 4.0
    CVE-2010-5298 Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remo…
    OpenSSLMariaDB
    EPSS 34.1% chance of exploitation in 30 days, percentile 98%
  26. 7.5
    CVE-2014-0160 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows re…
    OpenSSL
    kev 6 public exploits EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  27. 1.9
    CVE-2014-0076 The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior,…
    OpenSSL
  28. 4.3
    CVE-2013-4353 The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL poi…
    OpenSSL
    EPSS 11.9% chance of exploitation in 30 days, percentile 96%
  29. 5.8
    CVE-2013-6450 The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures fo…
    OpenSSL
    EPSS 15.4% chance of exploitation in 30 days, percentile 96%
  30. 4.3
    CVE-2013-6449 The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure,…
    OpenSSL
    EPSS 21.3% chance of exploitation in 30 days, percentile 97%