Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 334

Export CSV
CVE-2015-3197

OpenSSL: SSLv2 doesn't block disabled ciphers

ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.

CVSS 3.0 · 5.9 Medium EPSS 10.7% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Exalogic Infrastructure Oss Support Tools and 10 more
CVE-2014-0076

openssl: ECDSA nonces susceptible to Yarom/Benger flush+reload cache side-channel attack

The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-6304

openssl: OCSP Status Request extension unbounded memory growth

Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.

CVSS 3.1 · 7.5 High EPSS 63.0% KEV · Not listed
Vendors
Nodejs Novell Openssl and 1 more
Products
Node.js Suse Linux Enterprise Module For Web Scripting Openssl and 8 more
CVE-2016-6305

openssl: SSL_peek() hang on empty record

The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (infinite loop) by triggering a zero-length record in an SSL_peek call.

CVSS 3.0 · 7.5 High EPSS 16.0% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-6306

openssl: certificate message OOB reads

The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.

CVSS 3.1 · 5.9 Medium EPSS 41.7% KEV · Not listed
Vendors
Canonical Debian Hp and 4 more
Products
Ubuntu Linux Debian Linux Icewall Federation Agent and 8 more
CVE-2016-6307

openssl: excessive allocation of memory in tls_get_message_header()

The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted TLS messages, related to statem/statem.c and statem/statem_lib.c.

CVSS 3.0 · 5.9 Medium EPSS 13.8% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-6308

openssl: excessive allocation of memory in dtls1_preprocess_fragment()

statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow remote attackers to cause a denial of service (memory consumption) via crafted DTLS messages.

CVSS 3.0 · 5.9 Medium EPSS 12.3% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-6309

openssl: Use After Free for large message sizes

statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or possibly execute arbitrary code via a crafted TLS session.

CVSS 3.0 · 9.8 Critical EPSS 70.2% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-6302

openssl: Insufficient TLS session ticket HMAC length checks

The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.

CVSS 3.0 · 7.5 High EPSS 27.8% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Solaris and 2 more
CVE-2016-2842

openssl: doapr_outch function does not verify that certain memory allocation succeeds

The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.

CVSS 3.0 · 9.8 Critical EPSS 53.7% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Core Services and 1 more
CVE-2016-2182

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 44.2% KEV · Not listed
Vendors
Hp Openssl Oracle and 1 more
Products
Icewall Federation Agent Icewall Mcrp Icewall Sso and 5 more
CVE-2016-2181

openssl: DTLS replay protection bypass allows DoS against DTLS connection

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.

CVSS 3.0 · 7.5 High EPSS 22.6% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Enterprise Linux
CVE-2016-2180

OpenSSL: OOB read in TS_OBJ_print_bio()

The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted time-stamp file that is mishandled by the "openssl ts" command.

CVSS 3.0 · 7.5 High EPSS 30.0% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Enterprise Linux
CVE-2016-2179

openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer

The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attackers to cause a denial of service (memory consumption) by maintaining many crafted DTLS sessions simultaneously, related to d1_lib.c, statem_dtls.c, statem_lib.c, and statem_srvr.c.

CVSS 3.0 · 7.5 High EPSS 26.6% KEV · Not listed
Vendors
Openssl Oracle Redhat
Products
Openssl Linux Enterprise Linux
CVE-2016-2178

openssl: Non-constant time codepath followed for certain operations in DSA implementation

The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Nodejs and 4 more
Products
Ubuntu Linux Debian Linux Node.js and 7 more
CVE-2016-2177

openssl: Possible integer overflow vulnerabilities in codebase

OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c.

CVSS 3.0 · 9.8 Critical EPSS 44.5% KEV · Not listed
Vendors
Hp Openssl Oracle and 1 more
Products
Icewall Mcrp Icewall Sso Icewall Sso Agent Option and 6 more
CVE-2016-2176

openssl: EBCDIC overread in X509_NAME_oneline()

The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a denial of service (buffer over-read) via crafted EBCDIC ASN.1 data.

CVSS 3.0 · 8.2 High EPSS 24.0% KEV · Not listed
Vendors
Openssl
Products
Openssl
CVE-2016-2109

openssl: ASN.1 BIO handling of large amounts of data

The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.

CVSS 3.0 · 7.5 High EPSS 29.2% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Enterprise Linux Desktop and 9 more
CVE-2016-2108

openssl: Memory corruption in the ASN.1 encoder

The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue.

CVSS 3.0 · 9.8 Critical EPSS 77.9% KEV · Not listed
Vendors
Google Openssl Redhat
Products
Android Openssl Enterprise Linux and 10 more