Fixed in
Check your version
openssl versionCVEs affecting 3.0
| CVE | Title | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2022-2274 | RSA implementation bug in AVX512IFMA instructions | 9.8 | — | 2022-07-01 | |
| CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | — | 2022-03-15 | |
| CVE-2022-3602 | X.509 Email Address 4-byte Buffer Overflow | 7.5 | — | 2022-11-01 | |
| CVE-2022-3358 | Using a Custom Cipher with NID_undef may lead to NULL encryption | 7.5 | — | 2022-10-11 | |
| CVE-2022-1473 | Resource leakage when decoding certificates and keys | 7.5 | — | 2022-05-03 | |
| CVE-2023-0217 | NULL dereference validating DSA public key | 7.5 | — | 2023-02-08 | |
| CVE-2021-4044 | Invalid handling of X509_verify_cert() internal errors in libssl | 7.5 | — | 2021-12-14 | |
| CVE-2023-0401 | NULL dereference during PKCS7 data verification | 7.5 | — | 2023-02-08 | |
| CVE-2023-0216 | Invalid pointer dereference in d2i_PKCS7 functions | 7.5 | — | 2023-02-08 | |
| CVE-2022-1292 | The c_rehash script allows command injection | 7.3 | — | 2022-05-03 | |
| CVE-2022-2068 | The c_rehash script allows command injection | 7.3 | — | 2022-06-21 | |
| CVE-2023-6129 | POLY1305 MAC implementation corrupts vector registers on PowerPC | 6.5 | — | 2024-01-09 | |
| CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | 5.9 | — | 2025-09-30 | |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | 5.9 | — | 2025-09-30 | |
| CVE-2022-1434 | Incorrect MAC key used in the RC4-MD5 ciphersuite | 5.9 | — | 2022-05-03 | |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | 5.9 | — | 2022-01-28 | |
| CVE-2022-2097 | AES OCB fails to encrypt some bytes | 5.3 | — | 2022-07-05 | |
| CVE-2023-2975 | AES-SIV implementation ignores empty associated data entries | 5.3 | — | 2023-07-14 | |
| CVE-2022-1343 | OCSP_basic_verify may incorrectly verify the response signing certificate | 5.3 | — | 2022-05-03 | |
| CVE-2023-3446 | Excessive time spent checking DH keys and parameters | 5.3 | — | 2023-07-19 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).