Package · Ubuntu

openssl

197 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

Unscored —

CVE-2014-3570 Public exploit EPSS 22%

The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly cal…

openssl openssl Debian Ubuntu

Jan 9, 2015
Unscored —

CVE-2014-8275 Public exploit EPSS 15%

OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificat…

openssl openssl Debian Ubuntu

Jan 9, 2015
Low 3.4

CVE-2014-3566 Public exploit EPSS 100%

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

openssl openjdk-7 openssl wolfssl Debian Ubuntu

Oct 15, 2014
Unscored —

CVE-2014-3507 Public exploit EPSS 54%

Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 bef…

openssl openssl Debian Ubuntu

Aug 13, 2014
Unscored —

CVE-2014-5139 Public exploit EPSS 16%

The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a de…

openssl openssl Debian Ubuntu

Aug 13, 2014
Unscored —

CVE-2014-0224 Public exploit EPSS 95%

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCip…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-0221 Public exploit EPSS 88%

The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014
Unscored —

CVE-2014-0195 Public exploit EPSS 100%

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.…

openssl openssl openssl098 Debian Ubuntu

Jun 5, 2014