Skip to content
OpenAdvisories

Vendor

OpenSSL

147 known vulnerabilities.

Products

OpenSSL 146 OpenSSL extension of Ruby (Git trunk) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-5535 Public exploit

    SSL_select_next_proto buffer overread

    Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences suc…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-2274 Public exploit EPSS 48%

    RSA implementation bug in AVX512IFMA instructions

    The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happe…

    OpenSSL OpenSSL openssl edk2 Debian Ubuntu crates.io
  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu
  • Critical 9.8
    CVE-2021-3711 Public exploit EPSS 88%

    SM2 Decryption Buffer Overflow

    In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramet…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io