Vulnerabilities in OpenSSL
142 resultsCVE-2022-2068CRITICALThe c_rehash script allows command injectionEPSS 96.4%CVE-2022-3786HIGHX.509 Email Address Variable Length Buffer OverflowEPSS 92.5%CVE-2022-3602HIGHX.509 Email Address 4-byte Buffer OverflowEPSS 90.8%CVE-2021-3711—SM2 Decryption Buffer OverflowEPSS 87.8%CVE-2022-1292CRITICALThe c_rehash script allows command injectionEPSS 82.6%CVE-2023-2650MEDIUMPossible DoS translating ASN.1 object identifiersEPSS 75.4%CVE-2025-15467HIGHStack buffer overflow in CMS (Auth)EnvelopedData parsingEPSS 74.8%CVE-2022-0778HIGHInfinite loop in BN_mod_sqrt() reachable when parsing certificatesEPSS 73.2%CVE-2023-0286HIGHX.400 address type confusion in X.509 GeneralNameEPSS 69.3%CVE-2024-6119HIGHPossible denial of service in X.509 name checksEPSS 66.6%CVE-2021-3449—NULL pointer deref in signature_algorithms processingEPSS 63.5%CVE-2017-3731—Truncated packet could crash via OOB readEPSS 57.3%CVE-2017-3730—Bad (EC)DHE parameters cause a client crashEPSS 55.3%CVE-2020-1967—Segmentation fault in SSL_check_chainEPSS 53.3%CVE-2024-2511MEDIUMUnbounded memory growth with session handling in TLSv1.3EPSS 52.4%CVE-2021-23840HIGHInteger overflow in CipherUpdateEPSS 50.7%CVE-2021-4044—Invalid handling of X509_verify_cert() internal errors in libsslEPSS 50.1%CVE-2022-2274—RSA implementation bug in AVX512IFMA instructionsEPSS 48.2%CVE-2021-3712HIGHRead buffer overruns processing ASN.1 stringsEPSS 48.1%CVE-2018-0732—Client DoS due to large DH parameterEPSS 47.0%