OpenSSL vulnerabilities
147 CVEs and advisories name OpenSSL as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-23841Null pointer deref in X509_issuer_and_serial_hash()
- CVE-2021-23840Integer overflow in CipherUpdate
- CVE-2021-23839Incorrect SSLv2 rollback protection
- CVE-2020-1971EDIPARTYNAME NULL pointer dereference
- CVE-2020-1968Raccoon attack
- CVE-2020-1967Segmentation fault in SSL_check_chain
- CVE-2019-1551rsaz_512_sqr overflow bug on x86_64
- CVE-2011-4121The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used fo
- CVE-2019-1563Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
- CVE-2019-1549Fork Protection
- CVE-2019-1547ECDSA remote timing attack
- CVE-2019-1552Windows builds with insecure path defaults
- CVE-2019-1543ChaCha20-Poly1305 with long nonces
- CVE-2019-15590-byte record padding oracle
- CVE-2018-0734Timing attack against DSA
- CVE-2018-0735Timing attack against ECDSA signature generation
- CVE-2018-0732Client DoS due to large DH parameter
- CVE-2018-0737Cache timing vulnerability in RSA Key Generation
- CVE-2018-0739Constructed ASN.1 types with a recursive definition could exceed the stack
- CVE-2018-0733Incorrect CRYPTO_memcmp on HP-UX PA-RISC
- CVE-2016-8610A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi
- CVE-2017-3733Encrypt-Then-Mac renegotiation crash
- CVE-2017-3732BN_mod_exp may produce incorrect results on x86_64
- CVE-2017-3731Truncated packet could crash via OOB read
- CVE-2017-3730Bad (EC)DHE parameters cause a client crash
- CVE-2016-7054ChaCha20/Poly1305 heap-buffer-overflow
- CVE-2016-7053CMS Null dereference