Openssl (Redhat) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2024-04-25. Vendor: Redhat.
CVEs of Openssl
- CVE-2024-2467 - CVSS 5.9 (medium), 2024-04-25: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a…
- CVE-2013-0166 - CVSS 5 (medium), 2013-02-08: OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote…
- CVE-2012-2333 - CVSS 6.8 (medium), 2012-05-14: Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows…
- CVE-2012-2110 - CVSS 7.5 (high), 2012-04-19: The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret…
- CVE-2009-4355 - CVSS 5 (medium), 2010-01-14: Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers…
- CVE-2009-1386 - CVSS 5 (medium), 2009-06-04: ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS…
- CVE-2009-1387 - CVSS 5 (medium), 2009-06-04: The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL…
- CVE-2004-0112 - CVSS 5 (medium), 2004-11-23: The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets…
- CVE-2004-0081 - CVSS 5 (medium), 2004-11-23: OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as…
- CVE-2004-0079 - CVSS 7.5 (high), 2004-11-23: The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a…
