openssl

280 tracked vulnerabilities.

CVE-2016-7056 MEDIUM
OpenSSL < 1.0.1u - Timing Attack ECDSA P-256 Private Key Recovery
Sep 10, 2018
CVSS 5.5
EPSS 0.00
CVE-2016-8610 HIGH
OpenSSL 0.9.8 1.0.1 1.0.2-1.0.2h 1.1.0 - Denial of Service via ALERT Packet Processing
Nov 13, 2017
CVSS 7.5
EPSS 0.71
CVE-2016-7055 MEDIUM
OpenSSL 1.0.2-1.1.0c - Carry Propagating Bug in Montgomery Multiplication
May 04, 2017
CVSS 5.9
EPSS 0.03
CVE-2016-7054 HIGH
OpenSSL 1.1.0-1.1.0b - Denial of Service via CHACHA20-POLY1305 Cipher Payload Corruption
May 04, 2017
CVSS 7.5
EPSS 0.25
CVE-2016-7053 HIGH
OpenSSL 1.1.0-1.1.0b - NULL Pointer Dereference in ASN.1 CHOICE Type Handling
May 04, 2017
CVSS 7.5
EPSS 0.01
CVE-2016-7052 HIGH
Novell Suse Linux Enterprise Module F... - NULL Pointer Dereference
Sep 26, 2016
CVSS 7.5
EPSS 0.10
CVE-2016-6309 CRITICAL
OpenSSL 1.1.0a - Use-After-Free in statem/statem.c
Sep 26, 2016
CVSS 9.8
EPSS 0.28
CVE-2016-6308 MEDIUM
OpenSSL 1.1.0 - Denial of Service via DTLS Message Length Check Bypass
Sep 26, 2016
CVSS 5.9
EPSS 0.19
CVE-2016-6307 MEDIUM
OpenSSL 1.1.0 - Denial of Service via Excessive TLS Message Length
Sep 26, 2016
CVSS 5.9
EPSS 0.13
CVE-2016-6306 MEDIUM
OpenSSL < 1.0.1u and 1.0.2 < 1.0.2i - Denial of Service via Certificate Parser Out-of-bounds Read
Sep 26, 2016
CVSS 5.9
EPSS 0.08
CVE-2016-6305 HIGH
OpenSSL 1.1.0 - Denial of Service via Zero-Length Record in SSL_peek
Sep 26, 2016
CVSS 7.5
EPSS 0.25
CVE-2016-6304 HIGH
OpenSSL <1.0.1u, <1.0.2i, <1.1.0a - DoS
Sep 26, 2016
CVSS 7.5
EPSS 0.18
CVE-2016-6303 CRITICAL
Node.js < 0.12.16 - Out-of-bounds Write in MDC2_Update
Sep 16, 2016
CVSS 9.8
EPSS 0.26
CVE-2016-6302 HIGH
OpenSSL - Denial of Service via Short TLS Ticket
Sep 16, 2016
CVSS 7.5
EPSS 0.10
CVE-2016-2182 CRITICAL
HP Icewall Federation Agent - Out-of-Bounds Write
Sep 16, 2016
CVSS 9.8
EPSS 0.29
CVE-2016-2181 HIGH
OpenSSL - Denial of Service via DTLS Anti-Replay Feature
Sep 16, 2016
CVSS 7.5
EPSS 0.24
CVE-2016-2179 HIGH
OpenSSL - Denial of Service via DTLS Out-of-Order Message Queue
Sep 16, 2016
CVSS 7.5
EPSS 0.18
CVE-2016-2183 HIGH
Redhat Jboss Enterprise Application Platform - Information Disclosure
Sep 01, 2016
CVSS 7.5
EPSS 0.38
CVE-2016-2180 HIGH
OpenSSL - Denial of Service via Crafted Time-Stamp File in TS_OBJ_print_bio
Aug 01, 2016
CVSS 7.5
EPSS 0.05
CVE-2016-2178 MEDIUM
OpenSSL - Timing Side-Channel Attack in DSA Signing
Jun 20, 2016
CVSS 5.5
EPSS 0.00
CVE-2016-2177 CRITICAL
HP Icewall Mcrp - Integer Overflow
Jun 20, 2016
CVSS 9.8
EPSS 0.29
CVE-2016-2176 HIGH
OpenSSL < 1.0.1s - Buffer Over-Read via EBCDIC ASN.1 Data
May 05, 2016
CVSS 8.2
EPSS 0.08
CVE-2016-2109 HIGH
OpenSSL < 1.0.1s - Denial of Service via ASN.1 BIO Short Invalid Encoding
May 05, 2016
CVSS 7.5
EPSS 0.59
CVE-2016-2108 CRITICAL
Redhat Enterprise Linux Desktop < 1.0.1n - Memory Corruption
May 05, 2016
CVSS 9.8
EPSS 0.37
CVE-2016-2107 MEDIUM
Redhat Enterprise Linux Desktop < 1.0.1s - Information Disclosure
May 05, 2016
CVSS 5.9
EPSS 0.80