Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 5.9
    CVE-2015-3197 ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for ma…
    OpenSSL
    EPSS 10.7% chance of exploitation in 30 days, percentile 95%
  2. 4.3
    CVE-2015-3196 ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes t…
    OpenSSL
    EPSS 13.5% chance of exploitation in 30 days, percentile 96%
  3. 5.3
    CVE-2015-3195 The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0…
    OpenSSL
    EPSS 38.7% chance of exploitation in 30 days, percentile 98%
  4. 7.5
    CVE-2015-3194 crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL po…
    Node.jsOpenSSL
    EPSS 44.0% chance of exploitation in 30 days, percentile 98%
  5. 7.5
    CVE-2015-3193 The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by t…
    Node.jsOpenSSL
    EPSS 25.1% chance of exploitation in 30 days, percentile 97%
  6. 5.0
    CVE-2015-1794 The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segm…
    OpenSSL
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  7. 6.5
    CVE-2015-1793 The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic…
    OpenSSL
    2 public exploits EPSS 58.2% chance of exploitation in 30 days, percentile 99.1%
  8. 4.3
    CVE-2015-3216 Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in OpenSSL, as distributed in o…
    OpenSSL
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  9. 5.0
    CVE-2015-1792 The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1…
    OpenSSL
    EPSS 22.9% chance of exploitation in 30 days, percentile 97%
  10. 6.8
    CVE-2015-1791 Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.…
    OpenSSL
    EPSS 16.7% chance of exploitation in 30 days, percentile 97%
  11. 5.0
    CVE-2015-1790 The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 befo…
    OpenSSL
    EPSS 24.0% chance of exploitation in 30 days, percentile 97%
  12. 7.5
    CVE-2015-1789 The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before…
    OpenSSL
    EPSS 75.7% chance of exploitation in 30 days, percentile 99.5%
  13. 4.3
    CVE-2015-1788 The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.…
    OpenSSL
    EPSS 20.5% chance of exploitation in 30 days, percentile 97%
  14. 7.5
    CVE-2014-8176 The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structur…
    OpenSSL
    EPSS 16.6% chance of exploitation in 30 days, percentile 97%
  15. 3.7
    CVE-2015-4000 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_…
    OpenSSLGoogle Chrome
    1 public exploit EPSS 99.9% chance of exploitation in 30 days, percentile 99.9%
  16. 2.6
    CVE-2015-1787 The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-H…
    OpenSSL
    EPSS 5.9% chance of exploitation in 30 days, percentile 93%
  17. 5.0
    CVE-2015-0293 The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attacke…
    OpenSSL
    EPSS 21.2% chance of exploitation in 30 days, percentile 97%
  18. 7.5
    CVE-2015-0292 Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za,…
    OpenSSL
    EPSS 42.5% chance of exploitation in 30 days, percentile 98%
  19. 5.0
    CVE-2015-0291 The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer de…
    OpenSSL
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  20. 5.0
    CVE-2015-0290 The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit x86 platforms with AES NI sup…
    OpenSSL
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  21. 5.0
    CVE-2015-0289 The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly ha…
    OpenSSL
    EPSS 8.6% chance of exploitation in 30 days, percentile 95%
  22. 5.0
    CVE-2015-0288 The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 befo…
    OpenSSL
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  23. 5.0
    CVE-2015-0287 The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 befo…
    OpenSSL
    EPSS 8.6% chance of exploitation in 30 days, percentile 95%
  24. 5.0
    CVE-2015-0286 The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.…
    OpenSSL
    EPSS 19.9% chance of exploitation in 30 days, percentile 97%
  25. 4.3
    CVE-2015-0285 The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is seeded before proceeding with a…
    OpenSSL
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  26. 6.8
    CVE-2015-0209 Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1…
    OpenSSL
    EPSS 16.4% chance of exploitation in 30 days, percentile 97%
  27. 4.3
    CVE-2015-0208 The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a al…
    OpenSSL
    EPSS 29.5% chance of exploitation in 30 days, percentile 98%
  28. 5.0
    CVE-2015-0207 The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state information of independent data st…
    OpenSSL
    EPSS 6.5% chance of exploitation in 30 days, percentile 93%
  29. 5.0
    CVE-2015-0206 Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers…
    OpenSSL
    EPSS 57.4% chance of exploitation in 30 days, percentile 99%
  30. 5.0
    CVE-2015-0205 The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a…
    OpenSSL
    EPSS 22.3% chance of exploitation in 30 days, percentile 97%