Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 5.9
    CVE-2016-6307 The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow…
    OpenSSL
    EPSS 13.8% chance of exploitation in 30 days, percentile 96%
  2. 5.9
    CVE-2016-6306 The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-b…
    Node.jsOpenSSL
    EPSS 41.7% chance of exploitation in 30 days, percentile 98%
  3. 7.5
    CVE-2016-6305 The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (…
    OpenSSL
    EPSS 16.0% chance of exploitation in 30 days, percentile 96%
  4. 7.5
    CVE-2016-6304 Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a…
    Node.jsOpenSSL
    EPSS 63.0% chance of exploitation in 30 days, percentile 99.2%
  5. 9.8
    CVE-2016-6303 Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of…
    Node.jsOpenSSL
    EPSS 32.0% chance of exploitation in 30 days, percentile 98%
  6. 7.5
    CVE-2016-6302 The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket len…
    OpenSSL
    EPSS 27.8% chance of exploitation in 30 days, percentile 98%
  7. 9.8
    CVE-2016-2182 The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote att…
    OpenSSL
    EPSS 44.2% chance of exploitation in 30 days, percentile 98%
  8. 7.5
    CVE-2016-2181 The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a…
    OpenSSL
    EPSS 22.6% chance of exploitation in 30 days, percentile 97%
  9. 7.5
    CVE-2016-2179 The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-orde…
    OpenSSL
    EPSS 26.6% chance of exploitation in 30 days, percentile 98%
  10. 7.5
    CVE-2016-2183 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of app…
    Node.jsOpenSSLOracle Database
    EPSS 94.7% chance of exploitation in 30 days, percentile 99.8%
  11. 7.5
    CVE-2016-2180 The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in Open…
    OpenSSL
    EPSS 30.0% chance of exploitation in 30 days, percentile 98%
  12. 5.5
    CVE-2016-2178 The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations…
    Node.jsOpenSSL
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  13. 9.8
    CVE-2016-2177 OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a d…
    OpenSSL
    EPSS 44.5% chance of exploitation in 30 days, percentile 98%
  14. 7.5
    CVE-2000-1254 crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it ea…
    OpenSSL
    EPSS 3.1% chance of exploitation in 30 days, percentile 88%
  15. 8.2
    CVE-2016-2176 The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain…
    OpenSSL
    EPSS 24.0% chance of exploitation in 30 days, percentile 97%
  16. 7.5
    CVE-2016-2109 The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h a…
    OpenSSL
    EPSS 29.2% chance of exploitation in 30 days, percentile 98%
  17. 9.8
    CVE-2016-2108 The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a deni…
    OpenSSL
    EPSS 77.9% chance of exploitation in 30 days, percentile 99.5%
  18. 5.9
    CVE-2016-2107 The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding che…
    Node.jsOpenSSL
    1 public exploit EPSS 89.1% chance of exploitation in 30 days, percentile 99.7%
  19. 7.5
    CVE-2016-2106 Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote a…
    OpenSSL
    EPSS 27.3% chance of exploitation in 30 days, percentile 98%
  20. 7.5
    CVE-2016-2105 Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote att…
    Node.jsOpenSSLMySQL
    EPSS 39.7% chance of exploitation in 30 days, percentile 98%
  21. 9.8
    CVE-2016-2842 The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memo…
    OpenSSL
    EPSS 53.7% chance of exploitation in 30 days, percentile 99%
  22. 9.8
    CVE-2016-0799 The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, wh…
    OpenSSL
    EPSS 32.4% chance of exploitation in 30 days, percentile 98%
  23. 7.5
    CVE-2016-0798 Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to c…
    OpenSSL
    EPSS 24.4% chance of exploitation in 30 days, percentile 97%
  24. 7.5
    CVE-2016-0797 Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap…
    Node.jsOpenSSL
    EPSS 27.0% chance of exploitation in 30 days, percentile 98%
  25. 9.8
    CVE-2016-0705 Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g…
    OpenSSLMySQL
    EPSS 26.3% chance of exploitation in 30 days, percentile 98%
  26. 5.1
    CVE-2016-0702 The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly…
    Node.jsOpenSSL
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  27. 5.9
    CVE-2016-0704 An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.…
    OpenSSL
    EPSS 6.9% chance of exploitation in 30 days, percentile 94%
  28. 5.9
    CVE-2016-0703 The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.…
    OpenSSL
    EPSS 5.4% chance of exploitation in 30 days, percentile 92%
  29. 5.9
    CVE-2016-0800 The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify m…
    OpenSSL
    1 public exploit EPSS 82.1% chance of exploitation in 30 days, percentile 99.6%
  30. 3.7
    CVE-2016-0701 The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for…
    OpenSSL
    EPSS 83.6% chance of exploitation in 30 days, percentile 99.6%