Vulnerabilidades en OpenSSL
142 resultadosCVE-2023-6129MEDIUMPOLY1305 MAC implementation corrupts vector registers on PowerPCEPSS 2.3%CVE-2023-6237MEDIUMExcessive time spent checking invalid RSA public keysEPSS 2.3%CVE-2025-9231MEDIUMTiming side-channel in SM2 algorithm on 64 bit ARMEPSS 2.2%CVE-2022-1343MEDIUMOCSP_basic_verify may incorrectly verify the response signing certificateEPSS 2.2%CVE-2025-9232MEDIUMOut-of-bounds read in HTTP client no_proxy handlingEPSS 2.0%CVE-2023-0217HIGHNULL dereference validating DSA public keyEPSS 1.8%CVE-2023-0401HIGHNULL dereference during PKCS7 data verificationEPSS 1.8%CVE-2023-0216HIGHInvalid pointer dereference in d2i_PKCS7 functionsEPSS 1.8%CVE-2023-0465MEDIUMInvalid certificate policies in leaf certificates are silently ignoredEPSS 1.8%CVE-2023-0466MEDIUMCertificate policy check not enabledEPSS 1.8%CVE-2026-18798HIGHQUIC Server May Trigger Double Free When Processing INITIAL PacketEPSS 1.7%CVE-2026-63076HIGHInvalid Pointer Dereference in CMP Server via Crafted protectionAlgEPSS 1.6%CVE-2023-4807HIGHPOLY1305 MAC implementation corrupts XMM registers on WindowsEPSS 1.6%CVE-2025-9230CRITICALOut-of-bounds read & write in RFC 3211 KEK UnwrapEPSS 1.6%CVE-2022-4203MEDIUMX.509 Name Constraints Read Buffer OverflowEPSS 1.4%CVE-2022-3996HIGHX.509 Policy Constraints Double LockingEPSS 1.3%CVE-2022-1434—Incorrect MAC key used in the RC4-MD5 ciphersuiteEPSS 1.2%CVE-2026-14457HIGHRPK Server Signature Algorithm Selection Can Dereference a Missing CertificateEPSS 1.2%CVE-2026-42764HIGHNULL Pointer Dereference in QUIC Server Initial Packet HandlingEPSS 1.2%CVE-2026-63073CRITICALUntrusted Sender DN Used as Format String in CMP Response ValidationEPSS 1.2%