Vulnerabilities in OpenSSL
142 resultsCVE-2016-8610—A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processiEPSS 39.9%CVE-2016-7054—ChaCha20/Poly1305 heap-buffer-overflowEPSS 32.4%CVE-2022-4450HIGHDouble free after calling PEM_read_bio_exEPSS 28.6%CVE-2022-4304MEDIUMTiming Oracle in RSA DecryptionEPSS 23.5%CVE-2016-7053—CMS Null dereferenceEPSS 21.7%CVE-2018-0739—Constructed ASN.1 types with a recursive definition could exceed the stackEPSS 18.6%CVE-2021-3450—CA certificate check bypass with X509_V_FLAG_X509_STRICTEPSS 18.3%CVE-2019-1559—0-byte record padding oracleEPSS 17.1%CVE-2017-3732—BN_mod_exp may produce incorrect results on x86_64EPSS 15.4%CVE-2019-1551—rsaz_512_sqr overflow bug on x86_64EPSS 14.3%CVE-2017-3733—Encrypt-Then-Mac renegotiation crashEPSS 12.9%CVE-2018-0734—Timing attack against DSAEPSS 12.2%CVE-2018-0737—Cache timing vulnerability in RSA Key GenerationEPSS 11.6%CVE-2018-0733—Incorrect CRYPTO_memcmp on HP-UX PA-RISCEPSS 8.3%CVE-2021-23841—Null pointer deref in X509_issuer_and_serial_hash()EPSS 7.4%CVE-2020-1971MEDIUMEDIPARTYNAME NULL pointer dereferenceEPSS 7.0%CVE-2023-3446MEDIUMExcessive time spent checking DH keys and parametersEPSS 6.5%CVE-2019-1549—Fork ProtectionEPSS 6.2%CVE-2024-9143HIGHLow-level invalid GF(2^m) parameters lead to OOB memory accessEPSS 5.8%CVE-2019-1543—ChaCha20-Poly1305 with long noncesEPSS 5.7%