DLA-1932-1 openssl - security update
Published
Unknown
Technology
OpenSSL vulnerabilities
The OpenSSL cryptography library and its distribution packages. 809 published CVES affecting OpenSSL, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 809
- Critical
- 71
- High
- 295
- Medium
- 282
- Low
- 36
- Unscored
- 125
- CISA KEV
- 1
Latest OpenSSL CVEs
Newest publication first · page 19 of 33
-
-
CVE-2019-1549 Fork Protection
PublishedMediumCVSS 5.3 EPSS 6.2%OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in...
-
CVE-2019-1547 ECDSA remote timing attack
PublishedMediumCVSS 4.7 EPSS 1.1%Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a g...
-
LowCVSS 3.7 EPSS 3.8%
In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message th...
-
HighCVSS 7.8 EPSS 0.93%
An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior...
-
CVE-2018-20997 Use after free in openssl
PublishedCriticalCVSS 9.8 EPSS 1.7%An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
-
HighCVSS 8.1 EPSS 0.75%
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.
-
MediumCVSS 5.9 EPSS 0.71%
Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the...
-
LowCVSS 3.3 EPSS 0.70%
OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. F...
-
HighCVSS 7.8 EPSS 0.69%
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it...
-
DSA-4475-1 openssl - security update
PublishedUnknown -
HighCVSS 7.8 EPSS 0.93%
A vulnerability in the London Trust Media Private Internet Access (PIA) VPN Client 1.0.2 (build 02363) for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service (pia-service.exe) loads the OpenSSL...
-
HighCVSS 7.5
Versions of pem before 1.13.2 expose sensitive data when the readPkcs12 is used. The readPkcs12 function reads the certificate and key data from a pkcs12 file using the encryption password. As part of this process it creates a globally readable file with a filename of 20 random 0...
-
HighCVSS 7.4 EPSS 6.2%
While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS even when configured to verify the peer certificate while used with OpenSSL...
-
HighCVSS 7.4 EPSS 5.7%
ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 byt...
-
DLA-1701-1 openssl - security update
PublishedUnknown -
MediumCVSS 5.9 EPSS 17.1%
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...
-
HighCVSS 7.5 EPSS 59.9%
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSS...
-
DSA-4348-1 openssl - security update
PublishedUnknown -
DLA-1586-1 openssl - security update
PublishedUnknown -
CriticalCVSS 9.8 EPSS 10.7% PoC
An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first a...
-
MediumCVSS 4.7 EPSS 3.4%
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
-
CVE-2018-0734 Timing attack against DSA
PublishedMediumCVSS 5.9 EPSS 12.2%The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fi...
-
MediumCVSS 5.9 EPSS 4.7%
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
-
MediumCVSS 5.5 EPSS 0.62%
A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.