Check your version
openssl versionAffected version lines
Known vulnerabilities
| CVE | Title | Affected versions | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|---|
| CVE-2014-0160 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Exten... | ≥ 1.0.1 < 1.0.1g | 7.5 | KEV | 100.0% | 2014-04-07 |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | = 4.0.0 | 8.1 | — | 2026-06-09 | |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | = 4.0.0 | 4.8 | — | 2026-06-09 | |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | = 4.0.0 | 8.8 | — | 2026-06-09 | |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | = 4.0.0 | 5.9 | — | 2026-06-09 | |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | = 4.0.0 | 3.7 | — | 2026-06-09 | |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | = 4.0.0 | 5.3 | — | 2026-06-09 | |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | = 4.0.0 | 3.7 | — | 2026-06-09 | |
| CVE-2026-42771 | Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() | = 4.0.0 | 6.2 | — | 2026-06-09 | |
| CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-42765 | NULL Dereference in Certificate Verification with OCSP Checking | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | = 4.0.0 | 5.9 | — | 2026-06-09 | |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-35188 | Double-free When Checking OCSP Stapled Response | = 4.0.0 | 5.0 | — | 2026-06-09 | |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | = 4.0.0 | 7.5 | — | 2026-06-09 | |
| CVE-2026-34181 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys | = 4.0.0 | 7.4 | — | 2026-06-09 | |
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | = 4.0.0 | 9.1 | — | 2026-06-09 | |
| CVE-2025-69421 | NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function | ≥ 1.1.1 ≤ 1.1.1ze | 7.5 | — | 2026-01-27 | |
| CVE-2025-15467 | Stack buffer overflow in CMS (Auth)EnvelopedData parsing | ≥ 3.1.0 < 3.3.6 | 8.8 | — | 2026-01-27 | |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | ≥ 1.0.2 < 1.0.2zm ≥ 1.1.1 < 1.1.1zd ≥ 3.0.0 < 3.0.18 | 5.9 | — | 2025-09-30 | |
| CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | ≥ 1.0.2 < 1.0.2zm ≥ 1.1.1 < 1.1.1zd ≥ 3.0.0 < 3.0.18 | 5.9 | — | 2025-09-30 | |
| CVE-2025-4575 | The x509 application adds trusted use instead of rejected use | = 3.5.0 | 6.5 | — | 2025-05-22 | |
| CVE-2024-4741 | Use After Free with SSL_free_buffers | = 3.3.0 | 9.8 | — | 2024-11-13 | |
| CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | ≥ 1.1.1 ≤ 1.1.1x | 5.9 | — | 2024-04-08 | |
| CVE-2024-0727 | PKCS12 Decoding crashes | = 3.2.0 | 5.5 | — | 2024-01-26 | |
| CVE-2023-6129 | POLY1305 MAC implementation corrupts vector registers on PowerPC | ≥ 3.0.0 ≤ 3.0.12 ≥ 3.1.0 ≤ 3.1.4 = 3.2.0 | 6.5 | — | 2024-01-09 | |
| CVE-2023-3817 | Excessive time spent checking DH q parameter value | = 1.0.2 = 1.0.2a = 1.0.2b | 5.3 | — | 2023-07-31 | |
| CVE-2023-3446 | Excessive time spent checking DH keys and parameters | = 1.0.2 = 1.1.1 = 3.0.0 | 5.3 | — | 2023-07-19 | |
| CVE-2023-2975 | AES-SIV implementation ignores empty associated data entries | ≥ 3.0.0 ≤ 3.0.9 ≥ 3.1.0 ≤ 3.1.1 | 5.3 | — | 2023-07-14 | |
| CVE-2023-2650 | Possible DoS translating ASN.1 object identifiers | ≥ 3.1.0 < 3.1.1 | 6.5 | — | 2023-05-30 | |
| CVE-2023-0216 | Invalid pointer dereference in d2i_PKCS7 functions | ≥ 3.0.0 ≤ 3.0.7 | 7.5 | — | 2023-02-08 | |
| CVE-2023-0217 | NULL dereference validating DSA public key | ≥ 3.0.0 ≤ 3.0.7 | 7.5 | — | 2023-02-08 | |
| CVE-2023-0401 | NULL dereference during PKCS7 data verification | ≥ 3.0.0 ≤ 3.0.7 | 7.5 | — | 2023-02-08 | |
| CVE-2022-3602 | X.509 Email Address 4-byte Buffer Overflow | ≥ 3.0.0 < 3.0.7 | 7.5 | — | 2022-11-01 | |
| CVE-2022-3358 | Using a Custom Cipher with NID_undef may lead to NULL encryption | ≥ 3.0.0 < 3.0.6 | 7.5 | — | 2022-10-11 | |
| CVE-2022-2097 | AES OCB fails to encrypt some bytes | ≥ 1.1.1 < 1.1.1q ≥ 3.0.0 < 3.0.5 | 5.3 | — | 2022-07-05 | |
| CVE-2022-2274 | RSA implementation bug in AVX512IFMA instructions | = 3.0.4 | 9.8 | — | 2022-07-01 | |
| CVE-2022-2068 | The c_rehash script allows command injection | ≥ 1.0.2 < 1.0.2zf ≥ 1.1.1 < 1.1.1p ≥ 3.0.0 < 3.0.4 | 7.3 | — | 2022-06-21 | |
| CVE-2022-1292 | The c_rehash script allows command injection | ≥ 1.0.2 < 1.0.2ze ≥ 1.1.1 < 1.1.1o ≥ 3.0.0 < 3.0.3 | 7.3 | — | 2022-05-03 | |
| CVE-2022-1343 | OCSP_basic_verify may incorrectly verify the response signing certificate | ≥ 3.0.0 < 3.0.3 | 5.3 | — | 2022-05-03 | |
| CVE-2022-1434 | Incorrect MAC key used in the RC4-MD5 ciphersuite | ≥ 3.0.0 < 3.0.3 | 5.9 | — | 2022-05-03 | |
| CVE-2022-1473 | Resource leakage when decoding certificates and keys | ≥ 3.0.0 < 3.0.3 | 7.5 | — | 2022-05-03 | |
| CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | ≥ 1.0.2 < 1.0.2zd ≥ 1.1.0 < 1.1.1n ≥ 3.0.0 < 3.0.2 | 7.5 | — | 2022-03-15 | |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | ≥ 1.0.2 ≤ 1.0.2zb ≥ 1.1.1 < 1.1.1m = 3.0.0 | 5.9 | — | 2022-01-28 | |
| CVE-2021-4044 | Invalid handling of X509_verify_cert() internal errors in libssl | < 1.0.2 = 1.1.0 = 3.0.0 | 7.5 | — | 2021-12-14 | |
| CVE-2021-3711 | SM2 Decryption Buffer Overflow | ≥ 1.1.1 < 1.1.1l | 9.8 | — | 2021-08-24 | |
| CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | ≥ 1.0.2 < 1.0.2za ≥ 1.1.1 < 1.1.1l | 7.4 | — | 2021-08-24 | |
| CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | ≥ 1.1.1 < 1.1.1k | 5.9 | — | 2021-03-25 | |
| CVE-2021-3450 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | ≥ 1.1.1h < 1.1.1k | 7.4 | — | 2021-03-25 | |
| CVE-2021-23839 | Incorrect SSLv2 rollback protection | ≥ 1.0.2s ≤ 1.0.2x | 3.7 | — | 2021-02-16 | |
| CVE-2021-23840 | Integer overflow in CipherUpdate | ≥ 1.0.2 < 1.0.2y ≥ 1.1.1 < 1.1.1j | 7.5 | — | 2021-02-16 | |
| CVE-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | ≥ 1.0.2 < 1.0.2y ≥ 1.1.1 < 1.1.1j | 5.9 | — | 2021-02-16 | |
| CVE-2020-1971 | EDIPARTYNAME NULL pointer dereference | ≥ 1.0.2 < 1.0.2x ≥ 1.1.1 < 1.1.1i | 5.9 | — | 2020-12-08 | |
| CVE-2020-1968 | Raccoon attack | ≥ 1.0.2 ≤ 1.0.2v | 3.7 | — | 2020-09-09 | |
| CVE-2020-1967 | Segmentation fault in SSL_check_chain | ≥ 1.1.1d ≤ 1.1.1f | 7.5 | — | 2020-04-21 | |
| CVE-2019-1551 | rsaz_512_sqr overflow bug on x86_64 | ≥ 1.0.2 ≤ 1.0.2t ≥ 1.1.1 ≤ 1.1.1d | 5.3 | — | 2019-12-06 | |
| CVE-2019-1547 | ECDSA remote timing attack | ≥ 1.0.2 ≤ 1.0.2s ≥ 1.1.0 ≤ 1.1.0k ≥ 1.1.1 ≤ 1.1.1c | 4.7 | — | 2019-09-10 | |
| CVE-2019-1549 | Fork Protection | ≥ 1.1.1 ≤ 1.1.1c | 5.3 | — | 2019-09-10 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).