OpenSSL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
116 matching records
- High8.1NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.Check if you run itEPSS 0.12%Dec 14, 2025
- Medium4.3NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshakCheck if you run itEPSS 0.28%Nov 24, 2025
- Medium4.3Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggCheck if you run itEPSS 0.28%Nov 24, 2025
- Medium4.3NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshakCheck if you run itEPSS 0.28%Nov 24, 2025
- Medium4.3NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshakCheck if you run itEPSS 0.28%Nov 24, 2025
- Medium4.3NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshakCheck if you run itEPSS 0.28%Nov 24, 2025
- High7.5Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate thCheck if you run itEPSS 0.26%Nov 24, 2025
- High7.5NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificaCheck if you run itEPSS 0.26%Nov 24, 2025
- High7.5NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_daCheck if you run itEPSS 0.40%Nov 24, 2025
- Low2.7A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected selCheck if you run itEPSS 0.20%Oct 22, 2025
- High7.3In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local pCheck if you run itEPSS 0.33%Oct 3, 2025
- Medium5.9Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of thCheck if you run itEPSS 2.00%Sep 30, 2025
- Medium6.5Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms.Check if you run itEPSS 2.24%Sep 30, 2025
- High7.5Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.Check if you run itEPSS 1.55%Sep 30, 2025
- Low3.7glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines.Check if you run itEPSS 0.36%Sep 25, 2025
- Medium4.8glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.Check if you run itEPSS 0.31%Sep 25, 2025
- Medium4.5The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.Check if you run itEPSS 0.23%Jul 28, 2025
- Medium6.7A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library.Check if you run itEPSS 0.20%Jul 21, 2025
- High7.0In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_byteCheck if you run itEPSS 0.46%Jul 18, 2025
- Medium5.1Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command lineCheck if you run itEPSS 0.15%Jul 10, 2025
- High8.1A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.Check if you run itEPSS 1.73%Jul 7, 2025
- Medium5.0A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.Check if you run itEPSS 0.50%Jul 4, 2025
- Medium5.3OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSignCheck if you run itEPSS 0.45%Jun 16, 2025
- Medium6.5Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate.Check if you run itEPSS 0.38%May 22, 2025
- High7.0conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local useCheck if you run itEPSS 0.23%May 13, 2025