修正バージョン
バージョンを確認する
openssl version1.0 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2014-0160 | The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Exten... | 7.5 | KEV | 100.0% | 2014-04-07 |
| CVE-2009-3555 | The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Ser... | 9.8 | 87.3% | 2009-11-09 | |
| CVE-2016-2182 | The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division res... | 9.8 | — | 2016-09-16 | |
| CVE-2016-6303 | Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote a... | 9.8 | — | 2016-09-16 | |
| CVE-2016-2842 | The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does n... | 9.8 | — | 2016-03-03 | |
| CVE-2016-0705 | Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.... | 9.8 | — | 2016-03-03 | |
| CVE-2016-2108 | The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute a... | 9.8 | — | 2016-05-05 | |
| CVE-2016-2177 | OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow... | 9.8 | — | 2016-06-20 | |
| CVE-2016-0799 | The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly... | 9.8 | — | 2016-03-03 | |
| CVE-2016-2176 | The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allo... | 8.2 | — | 2016-05-05 | |
| CVE-2010-3864 | Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threa... | 7.6 | — | 2010-11-17 | |
| CVE-2017-3731 | Truncated packet could crash via OOB read | 7.5 | — | 2017-05-04 | |
| CVE-2016-6304 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow... | 7.5 | — | 2016-09-26 | |
| CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | — | 2022-03-15 | |
| CVE-2012-2110 | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.... | 7.5 | — | 2012-04-19 | |
| CVE-2016-2183 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products,... | 7.5 | — | 2016-09-01 | |
| CVE-2016-0797 | Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to ca... | 7.5 | — | 2016-03-03 | |
| CVE-2014-3512 | Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i all... | 7.5 | — | 2014-08-13 | |
| CVE-2015-3193 | The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the... | 7.5 | — | 2015-12-06 | |
| CVE-2016-2180 | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol... | 7.5 | — | 2016-08-01 | |
| CVE-2016-2105 | Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 be... | 7.5 | — | 2016-05-05 | |
| CVE-2016-6302 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during... | 7.5 | — | 2016-09-16 | |
| CVE-2015-0292 | Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementatio... | 7.5 | — | 2015-03-19 | |
| CVE-2016-2181 | The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch... | 7.5 | — | 2016-09-16 | |
| CVE-2016-0798 | Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g... | 7.5 | — | 2016-03-03 | |
| CVE-2016-2109 | The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0... | 7.5 | — | 2016-05-05 | |
| CVE-2016-2179 | The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries assoc... | 7.5 | — | 2016-09-16 | |
| CVE-2016-8610 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS... | 7.5 | — | 2017-11-13 | |
| CVE-2015-1789 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 bef... | 7.5 | — | 2015-06-12 | |
| CVE-2021-4044 | Invalid handling of X509_verify_cert() internal errors in libssl | 7.5 | — | 2021-12-14 | |
| CVE-2015-3194 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause... | 7.5 | — | 2015-12-06 | |
| CVE-2016-2106 | Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2... | 7.5 | — | 2016-05-05 | |
| CVE-2018-0732 | Client DoS due to large DH parameter | 7.5 | — | 2018-06-12 | |
| CVE-2014-8176 | The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 befo... | 7.5 | — | 2015-06-12 | |
| CVE-2010-4252 | OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE... | 7.5 | — | 2010-12-06 | |
| CVE-2010-0742 | The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.... | 7.5 | — | 2010-06-03 | |
| CVE-2021-23840 | Integer overflow in CipherUpdate | 7.5 | — | 2021-02-16 | |
| CVE-2016-7052 | crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer de... | 7.5 | — | 2016-09-26 | |
| CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | — | 2021-08-24 | |
| CVE-2014-0224 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of... | 7.4 | — | 2014-06-05 | |
| CVE-2022-1292 | The c_rehash script allows command injection | 7.3 | — | 2022-05-03 | |
| CVE-2022-2068 | The c_rehash script allows command injection | 7.3 | — | 2022-06-21 | |
| CVE-2014-3567 | Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and... | 7.1 | — | 2014-10-19 | |
| CVE-2014-3513 | Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to... | 7.1 | — | 2014-10-19 | |
| CVE-2015-0209 | Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf... | 6.8 | — | 2015-03-19 | |
| CVE-2015-1791 | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 b... | 6.8 | — | 2015-06-12 | |
| CVE-2012-2333 | Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.... | 6.8 | — | 2012-05-14 | |
| CVE-2014-0195 | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1... | 6.8 | — | 2014-06-05 | |
| CVE-2014-3509 | Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0... | 6.8 | — | 2014-08-13 | |
| CVE-2015-1793 | The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not... | 6.5 | — | 2015-07-09 | |
| CVE-2018-0739 | Constructed ASN.1 types with a recursive definition could exceed the stack | 6.5 | — | 2018-03-27 | |
| CVE-2017-3736 | There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.... | 6.5 | — | 2017-11-02 | |
| CVE-2010-1633 | RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pke... | 6.4 | — | 2010-06-03 | |
| CVE-2016-0800 | The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a se... | 5.9 | — | 2016-03-01 | |
| CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | 5.9 | — | 2025-09-30 | |
| CVE-2017-3738 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit... | 5.9 | — | 2017-12-07 | |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | 5.9 | — | 2025-09-30 | |
| CVE-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 5.9 | — | 2021-02-16 | |
| CVE-2016-2107 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation... | 5.9 | — | 2016-05-05 | |
| CVE-2018-0734 | Timing attack against DSA | 5.9 | — | 2018-10-30 | |
| CVE-2018-0737 | Cache timing vulnerability in RSA Key Generation | 5.9 | — | 2018-04-16 | |
| CVE-2020-1971 | EDIPARTYNAME NULL pointer dereference | 5.9 | — | 2020-12-08 | |
| CVE-2017-3732 | BN_mod_exp may produce incorrect results on x86_64 | 5.9 | — | 2017-05-04 | |
| CVE-2016-0704 | An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation... | 5.9 | — | 2016-03-02 | |
| CVE-2016-7055 | There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.... | 5.9 | — | 2017-05-04 | |
| CVE-2016-6306 | The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause... | 5.9 | — | 2016-09-26 | |
| CVE-2016-0703 | The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 b... | 5.9 | — | 2016-03-02 | |
| CVE-2015-3197 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers,... | 5.9 | — | 2016-02-15 | |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | 5.9 | — | 2022-01-28 | |
| CVE-2019-1559 | 0-byte record padding oracle | 5.9 | — | 2019-02-27 | |
| CVE-2017-3737 | OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a f... | 5.9 | — | 2017-12-07 | |
| CVE-2013-6450 | The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properl... | 5.8 | — | 2014-01-01 | |
| CVE-2016-7056 | A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local acces... | 5.5 | — | 2018-09-10 | |
| CVE-2016-2178 | The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the us... | 5.5 | — | 2016-06-20 | |
| CVE-2019-1551 | rsaz_512_sqr overflow bug on x86_64 | 5.3 | — | 2019-12-06 | |
| CVE-2023-3817 | Excessive time spent checking DH q parameter value | 5.3 | — | 2023-07-31 | |
| CVE-2015-3195 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t,... | 5.3 | — | 2015-12-06 | |
| CVE-2023-3446 | Excessive time spent checking DH keys and parameters | 5.3 | — | 2023-07-19 | |
| CVE-2017-3735 | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread.... | 5.3 | — | 2017-08-28 | |
| CVE-2016-0702 | The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 bef... | 5.1 | — | 2016-03-03 | |
| CVE-2015-0289 | The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 befor... | 5.0 | — | 2015-03-19 | |
| CVE-2015-1790 | The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1... | 5.0 | — | 2015-06-12 | |
| CVE-2011-0014 | ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a deni... | 5.0 | — | 2011-02-19 | |
| CVE-2014-3505 | Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 befor... | 5.0 | — | 2014-08-13 | |
| CVE-2015-0205 | The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts... | 5.0 | — | 2015-01-09 | |
| CVE-2014-3507 | Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and... | 5.0 | — | 2014-08-13 | |
| CVE-2015-0288 | The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1... | 5.0 | — | 2015-03-19 | |
| CVE-2015-0287 | The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1... | 5.0 | — | 2015-03-19 | |
| CVE-2015-0290 | The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 before 1.0.2a on 64-bit... | 5.0 | — | 2015-03-19 | |
| CVE-2012-0027 | The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher... | 5.0 | — | 2012-01-06 | |
| CVE-2011-4619 | The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not pro... | 5.0 | — | 2012-01-06 | |
| CVE-2009-1379 | Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.... | 5.0 | — | 2009-05-19 | |
| CVE-2015-0206 | Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.... | 5.0 | — | 2015-01-09 | |
| CVE-2012-0884 | The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1... | 5.0 | — | 2012-03-13 | |
| CVE-2012-2686 | crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL... | 5.0 | — | 2013-02-08 | |
| CVE-2015-0286 | The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 befor... | 5.0 | — | 2015-03-19 | |
| CVE-2014-3569 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly han... | 5.0 | — | 2014-12-24 | |
| CVE-2011-3210 | The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not... | 5.0 | — | 2011-09-22 | |
| CVE-2015-1792 | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 befo... | 5.0 | — | 2015-06-12 | |
| CVE-2015-0291 | The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denia... | 5.0 | — | 2015-03-19 | |
| CVE-2013-0166 | OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verifi... | 5.0 | — | 2013-02-08 | |
| CVE-2012-0050 | OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause... | 5.0 | — | 2012-01-19 | |
| CVE-2015-0293 | The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before... | 5.0 | — | 2015-03-19 | |
| CVE-2014-3572 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 befo... | 5.0 | — | 2015-01-09 | |
| CVE-2014-3570 | The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not pro... | 5.0 | — | 2015-01-09 | |
| CVE-2014-3571 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial... | 5.0 | — | 2015-01-09 | |
| CVE-2015-1794 | The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to ca... | 5.0 | — | 2015-12-06 | |
| CVE-2012-1165 | The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows re... | 5.0 | — | 2012-03-15 | |
| CVE-2011-3207 | crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which mak... | 5.0 | — | 2011-09-22 | |
| CVE-2015-0207 | The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 before 1.0.2a does not properly isolate the state infor... | 5.0 | — | 2015-03-19 | |
| CVE-2009-4355 | Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0... | 5.0 | — | 2010-01-14 | |
| CVE-2014-8275 | OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on c... | 5.0 | — | 2015-01-09 | |
| CVE-2011-4576 | The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data st... | 5.0 | — | 2012-01-06 | |
| CVE-2014-3506 | d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.... | 5.0 | — | 2014-08-13 | |
| CVE-2019-1547 | ECDSA remote timing attack | 4.7 | — | 2019-09-10 | |
| CVE-2018-5407 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timi... | 4.7 | — | 2018-11-15 | |
| CVE-2015-0204 | The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 befo... | 4.3 | — | 2015-01-09 | |
| CVE-2014-3568 | OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 bui... | 4.3 | — | 2014-10-19 | |
| CVE-2015-0208 | The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in O... | 4.3 | — | 2015-03-19 | |
| CVE-2011-4577 | OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to caus... | 4.3 | — | 2012-01-06 | |
| CVE-2013-6449 | The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from... | 4.3 | — | 2013-12-23 | |
| CVE-2010-2939 | Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenS... | 4.3 | — | 2010-08-17 | |
| CVE-2015-1788 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 befor... | 4.3 | — | 2015-06-12 | |
| CVE-2014-3511 | The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle atta... | 4.3 | — | 2014-08-13 | |
| CVE-2015-0285 | The ssl3_client_hello function in s3_clnt.c in OpenSSL 1.0.2 before 1.0.2a does not ensure that the PRNG is se... | 4.3 | — | 2015-03-19 | |
| CVE-2014-5139 | The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to c... | 4.3 | — | 2014-08-13 | |
| CVE-2014-3508 | The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and... | 4.3 | — | 2014-08-13 | |
| CVE-2015-3196 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a mu... | 4.3 | — | 2015-12-06 | |
| CVE-2015-3216 | Race condition in a certain Red Hat patch to the PRNG lock implementation in the ssleay_rand_bytes function in... | 4.3 | — | 2015-07-07 | |
| CVE-2013-4353 | The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause... | 4.3 | — | 2014-01-09 | |
| CVE-2014-3470 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.... | 4.3 | — | 2014-06-05 | |
| CVE-2014-0198 | The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled... | 4.3 | — | 2014-05-06 | |
| CVE-2014-0221 | The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1... | 4.3 | — | 2014-06-05 | |
| CVE-2011-4108 | The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain pa... | 4.3 | — | 2012-01-06 | |
| CVE-2014-3510 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n,... | 4.3 | — | 2014-08-13 | |
| CVE-2010-5298 | Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BU... | 4.0 | — | 2014-04-14 | |
| CVE-2020-1968 | Raccoon attack | 3.7 | — | 2020-09-09 | |
| CVE-2015-4000 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, do... | 3.7 | — | 2015-05-21 | |
| CVE-2019-1563 | Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey | 3.7 | — | 2019-09-10 | |
| CVE-2021-23839 | Incorrect SSLv2 rollback protection | 3.7 | — | 2021-02-16 | |
| CVE-2016-0701 | The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prim... | 3.7 | — | 2016-02-15 | |
| CVE-2014-3566 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding,... | 3.4 | — | 2014-10-15 | |
| CVE-2019-1552 | Windows builds with insecure path defaults | 3.3 | — | 2019-07-30 | |
| CVE-2011-1945 | The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital... | 2.6 | — | 2011-05-31 | |
| CVE-2015-1787 | The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authenticat... | 2.6 | — | 2015-03-19 | |
| CVE-2013-0169 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and oth... | 2.6 | — | 2013-02-08 | |
| CVE-2014-0076 | The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations ha... | 1.9 | — | 2014-03-25 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。