OpenSSL vulnerabilities
147 CVEs and advisories name OpenSSL as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-1255Input buffer over-read in AES-XTS implementation on 64 bit ARM
- CVE-2023-0466Certificate policy check not enabled
- CVE-2023-0465Invalid certificate policies in leaf certificates are silently ignored
- CVE-2023-0464Excessive Resource Usage Verifying X.509 Policy Constraints
- CVE-2022-4203X.509 Name Constraints Read Buffer Overflow
- CVE-2022-4304Timing Oracle in RSA Decryption
- CVE-2022-4450Double free after calling PEM_read_bio_ex
- CVE-2023-0215Use-after-free following BIO_new_NDEF
- CVE-2023-0216Invalid pointer dereference in d2i_PKCS7 functions
- CVE-2023-0217NULL dereference validating DSA public key
- CVE-2023-0286X.400 address type confusion in X.509 GeneralName
- CVE-2023-0401NULL dereference during PKCS7 data verification
- CVE-2022-3996X.509 Policy Constraints Double Locking
- CVE-2022-3786X.509 Email Address Variable Length Buffer Overflow
- CVE-2022-3602X.509 Email Address 4-byte Buffer Overflow
- CVE-2022-3358Using a Custom Cipher with NID_undef may lead to NULL encryption
- CVE-2022-2097AES OCB fails to encrypt some bytes
- CVE-2022-2274RSA implementation bug in AVX512IFMA instructions
- CVE-2022-2068The c_rehash script allows command injection
- CVE-2022-1473Resource leakage when decoding certificates and keys
- CVE-2022-1434Incorrect MAC key used in the RC4-MD5 ciphersuite
- CVE-2022-1343OCSP_basic_verify may incorrectly verify the response signing certificate
- CVE-2022-1292The c_rehash script allows command injection
- CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- CVE-2021-4160BN_mod_exp may produce incorrect results on MIPS
- CVE-2021-4044Invalid handling of X509_verify_cert() internal errors in libssl
- CVE-2021-3712Read buffer overruns processing ASN.1 strings
- CVE-2021-3711SM2 Decryption Buffer Overflow
- CVE-2021-3450CA certificate check bypass with X509_V_FLAG_X509_STRICT
- CVE-2021-3449NULL pointer deref in signature_algorithms processing