DLA-1449-1 openssl - security update
Published
Unknown
Technology
OpenSSL vulnerabilities
The OpenSSL cryptography library and its distribution packages. 809 published CVES affecting OpenSSL, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 809
- Critical
- 71
- High
- 295
- Medium
- 282
- Low
- 36
- Unscored
- 125
- CISA KEV
- 1
Latest OpenSSL CVEs
Newest publication first · page 20 of 33
-
-
HighCVSS 7.5 EPSS 47.0%
During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client...
-
CVE-2017-16065 openssl.js is malware
PublishedHighCVSS 7.5 EPSS 1.2%openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
CVE-2017-16064 node-openssl is malware
PublishedHighCVSS 7.5 EPSS 1.2%node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
MediumCVSS 5.9 EPSS 11.6%
The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affec...
-
DLA-1330-1 openssl - security update
PublishedUnknown -
DSA-4157-1 openssl - security update
PublishedUnknown -
MediumCVSS 6.5 EPSS 18.6%
Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from u...
-
MediumCVSS 5.9 EPSS 8.3%
Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guarantee...
-
HighCVSS 7.8 EPSS 0.51%
(1) lib/backup/cli/utility.rb in the backup-agoddard gem 3.0.28 and (2) lib/backup/cli/utility.rb in the backup_checksum gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process.
-
CriticalCVSS 9.1 EPSS 2.4%
Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentica...
-
MediumCVSS 5.9 EPSS 13.4%
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believ...
-
MediumCVSS 5.9 EPSS 78.7%
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as d...
-
HighCVSS 7.5 EPSS 2.0%
In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an attacker can cause a denial of service (application hang) via crafted PEM input that signifies a public key requiring a password, which triggers...
-
HighCVSS 7.5 EPSS 39.9%
A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amoun...
-
DSA-4018-1 openssl - security update
PublishedUnknown -
MediumCVSS 6.5 EPSS 10.1%
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are n...
-
DLA-1157-1 openssl - security update
PublishedUnknown -
HighCVSS 7.5 EPSS 7.7% PoC
The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (interpreter crash) via a crafted string.
-
MediumCVSS 5.9 EPSS 2.8%
The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.
-
MediumCVSS 5.3 EPSS 21.0%
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g...
-
HighCVSS 7.5 EPSS 6.2%
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number...
-
MediumCVSS 5.9 EPSS 14.2%
There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impos...
-
HighCVSS 7.5 EPSS 12.9%
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.
-
MediumCVSS 5.9 EPSS 15.4%
There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.