Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownSecurity update for openssl-3Oct 9, 2026
- High7.0ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityAug 13, 2026
- High7.2pyOpenSSL is a Python wrapper around the OpenSSL library.Mar 18, 2026
- Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.Mar 18, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Mar 13, 2026
- High8.8Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.EPSS 52.4%Jan 27, 2026
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.EPSS 5.6%Jun 27, 2024
- Medium5.5Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications lo…EPSS 3.2%Jan 26, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…EPSS 2.3%Jan 9, 2024
- Medium5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.EPSS 4.5%Nov 6, 2023
- High7.8POLY1305 MAC implementation corrupts XMM registers on WindowsEPSS 1.6%Sep 8, 2023
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.EPSS 3.0%Jul 31, 2023
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.EPSS 6.5%Jul 19, 2023
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.EPSS 75.4%May 30, 2023
- Medium5.3The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.EPSS 1.8%Mar 28, 2023
- Medium5.3Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.EPSS 1.8%Mar 28, 2023
- High7.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.EPSS 4.0%Mar 22, 2023
- High7.4There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.EPSS 71.2%Feb 8, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.EPSS 5.0%Feb 8, 2023
- High7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.EPSS 28.6%Feb 8, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.EPSS 23.5%Feb 8, 2023
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.EPSS 4.9%Jul 5, 2022
- Critical9.8The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions.EPSS 48.2%Jul 1, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…EPSS 96.4%Jun 21, 2022
- High7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries.EPSS 4.6%May 3, 2022
31 records · page 1 of 2
PreviousNext