OpenSSL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
116 matching records
- Low2.5NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in aCheck if you run itEPSS 0.17%Apr 22, 2025
- Medium6.5A vulnerability was found in Golang FIPS OpenSSL.Check if you run itEPSS 0.30%Oct 1, 2024
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.Check if you run itEPSS 5.58%Jun 27, 2024
- UnknownOpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%May 6, 2024
- Medium5.5Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications lo…Check if you run itEPSS 3.19%Jan 26, 2024
- Medium6.5Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CP…Check if you run itEPSS 2.32%Jan 9, 2024
- Medium5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.Check if you run itEPSS 4.46%Nov 6, 2023
- High7.8POLY1305 MAC implementation corrupts XMM registers on WindowsCheck if you run itEPSS 1.58%Sep 8, 2023
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.Check if you run itEPSS 3.05%Jul 31, 2023
- Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.Check if you run itEPSS 6.53%Jul 19, 2023
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.Check this weekEPSS 75.36%May 30, 2023
- Medium5.3The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.Check if you run itEPSS 1.77%Mar 28, 2023
- Medium5.3Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.Check if you run itEPSS 1.77%Mar 28, 2023
- High7.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.Check if you run itEPSS 3.98%Mar 22, 2023
- High7.4There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName.Check this weekEPSS 69.29%Feb 8, 2023
- High7.5The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO.Check if you run itEPSS 5.02%Feb 8, 2023
- High7.5The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g.Check this weekEPSS 28.59%Feb 8, 2023
- Medium5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.Check this weekEPSS 23.51%Feb 8, 2023
- UnknownCVE-2022-3786 is listed by HCSEC-2022-27 - HashiCorp Response to OpenSSL Security Announcement Regarding November 1 Release.Check this weekEPSS 92.49%Nov 1, 2022
- UnknownCVE-2022-3602 is listed by HCSEC-2022-27 - HashiCorp Response to OpenSSL Security Announcement Regarding November 1 Release.Check this weekEPSS 90.77%Nov 1, 2022
- Medium5.3AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.Check if you run itEPSS 4.90%Jul 5, 2022
- Critical9.8The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions.Check this weekEPSS 48.23%Jul 1, 2022
- High7.3In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metac…Check this weekEPSS 96.39%Jun 21, 2022
- High7.5The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries.Check if you run itEPSS 4.68%May 3, 2022
- Medium5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key.Check if you run itEPSS 1.23%May 3, 2022