openssl-src vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2022-4304Mediumopenssl-src: openssl-src subject to Timing Oracle in RSA Decryption CVE-2023-0215Highopenssl-src: openssl-src vulnerable to Use-after-free following `BIO_new_NDEF`CVE-2022-4203Criticalopenssl-src: openssl-src contains Read Buffer Overflow in X.509 Name Constraint CVE-2023-0216Highopenssl-src: openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions CVE-2022-4450Highopenssl-src: openssl-src contains Double free after calling `PEM_read_bio_ex`CVE-2023-0217Highopenssl-src: openssl-src subject to NULL dereference validating DSA public key CVE-2023-0401Highopenssl-src: openssl-src contains `NULL` dereference during PKCS7 data verification CVE-2023-0286Highcryptography: Vulnerable OpenSSL included in cryptography wheels CVE-2022-3996Highopenssl-src: Denial of service by double-checked locking in openssl-src CVE-2022-3602Criticalopenssl-src: X.509 Email Address 4-byte Buffer Overflow CVE-2022-3786Highopenssl-src: X.509 Email Address Variable Length Buffer Overflow CVE-2022-3358Highopenssl-src: Using a Custom Cipher with `NID_undef` may lead to NULL encryption CVE-2022-2097Highopenssl-src: AES OCB fails to encrypt some bytes CVE-2022-2274Criticalopenssl-src: openssl-src heap memory corruption with RSA private key operation CVE-2021-3711Criticalopenssl-src: SM2 Decryption Buffer Overflow CVE-2021-3712Highopenssl-src: Read buffer overruns processing ASN.1 strings CVE-2022-1343Mediumopenssl-src: `OCSP_basic_verify` may incorrectly verify the response signing certificate CVE-2022-1473Highopenssl-src: Resource leakage when decoding certificates and keys CVE-2022-1434Mediumopenssl-src: Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-0778Highopenssl-src: openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates CVE-2021-4044Highopenssl-src: Invalid handling of `X509_verify_cert()` internal errors in libssl CVE-2021-3449Mediumopenssl-src: openssl-src NULL pointer Dereference in signature_algorithms processing CVE-2021-3450Highopenssl-src: Certificate check bypass in openssl-src CVE-2021-23841Mediumopenssl-src: Integer Overflow in openssl-src CVE-2021-23840Highopenssl-src: Integer Overflow in openssl-src

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo