修正バージョン
バージョンを確認する
openssl version1.1 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2016-6309 | statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows r... | 9.8 | — | 2016-09-26 | |
| CVE-2021-3711 | SM2 Decryption Buffer Overflow | 9.8 | — | 2021-08-24 | |
| CVE-2017-3731 | Truncated packet could crash via OOB read | 7.5 | — | 2017-05-04 | |
| CVE-2016-6304 | Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow... | 7.5 | — | 2016-09-26 | |
| CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | — | 2022-03-15 | |
| CVE-2016-6305 | The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers t... | 7.5 | — | 2016-09-26 | |
| CVE-2016-7054 | ChaCha20/Poly1305 heap-buffer-overflow | 7.5 | — | 2017-05-04 | |
| CVE-2016-7053 | CMS Null dereference | 7.5 | — | 2017-05-04 | |
| CVE-2025-69421 | NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function | 7.5 | — | 2026-01-27 | |
| CVE-2021-4044 | Invalid handling of X509_verify_cert() internal errors in libssl | 7.5 | — | 2021-12-14 | |
| CVE-2018-0732 | Client DoS due to large DH parameter | 7.5 | — | 2018-06-12 | |
| CVE-2020-1967 | Segmentation fault in SSL_check_chain | 7.5 | — | 2020-04-21 | |
| CVE-2017-3730 | Bad (EC)DHE parameters cause a client crash | 7.5 | — | 2017-05-04 | |
| CVE-2017-3733 | Encrypt-Then-Mac renegotiation crash | 7.5 | — | 2017-05-04 | |
| CVE-2021-23840 | Integer overflow in CipherUpdate | 7.5 | — | 2021-02-16 | |
| CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | — | 2021-08-24 | |
| CVE-2019-1543 | ChaCha20-Poly1305 with long nonces | 7.4 | — | 2019-03-06 | |
| CVE-2021-3450 | CA certificate check bypass with X509_V_FLAG_X509_STRICT | 7.4 | — | 2021-03-25 | |
| CVE-2022-1292 | The c_rehash script allows command injection | 7.3 | — | 2022-05-03 | |
| CVE-2022-2068 | The c_rehash script allows command injection | 7.3 | — | 2022-06-21 | |
| CVE-2018-0739 | Constructed ASN.1 types with a recursive definition could exceed the stack | 6.5 | — | 2018-03-27 | |
| CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | 5.9 | — | 2025-09-30 | |
| CVE-2017-3738 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit... | 5.9 | — | 2017-12-07 | |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | 5.9 | — | 2025-09-30 | |
| CVE-2021-23841 | Null pointer deref in X509_issuer_and_serial_hash() | 5.9 | — | 2021-02-16 | |
| CVE-2016-6307 | The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excess... | 5.9 | — | 2016-09-26 | |
| CVE-2018-0734 | Timing attack against DSA | 5.9 | — | 2018-10-30 | |
| CVE-2018-0737 | Cache timing vulnerability in RSA Key Generation | 5.9 | — | 2018-04-16 | |
| CVE-2016-6308 | statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checkin... | 5.9 | — | 2016-09-26 | |
| CVE-2020-1971 | EDIPARTYNAME NULL pointer dereference | 5.9 | — | 2020-12-08 | |
| CVE-2018-0735 | Timing attack against ECDSA signature generation | 5.9 | — | 2018-10-29 | |
| CVE-2017-3732 | BN_mod_exp may produce incorrect results on x86_64 | 5.9 | — | 2017-05-04 | |
| CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | 5.9 | — | 2024-04-08 | |
| CVE-2018-0733 | Incorrect CRYPTO_memcmp on HP-UX PA-RISC | 5.9 | — | 2018-03-27 | |
| CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | — | 2021-03-25 | |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | 5.9 | — | 2022-01-28 | |
| CVE-2022-2097 | AES OCB fails to encrypt some bytes | 5.3 | — | 2022-07-05 | |
| CVE-2019-1551 | rsaz_512_sqr overflow bug on x86_64 | 5.3 | — | 2019-12-06 | |
| CVE-2023-3817 | Excessive time spent checking DH q parameter value | 5.3 | — | 2023-07-31 | |
| CVE-2019-1549 | Fork Protection | 5.3 | — | 2019-09-10 | |
| CVE-2023-3446 | Excessive time spent checking DH keys and parameters | 5.3 | — | 2023-07-19 | |
| CVE-2017-3735 | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread.... | 5.3 | — | 2017-08-28 | |
| CVE-2019-1547 | ECDSA remote timing attack | 4.7 | — | 2019-09-10 | |
| CVE-2019-1563 | Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey | 3.7 | — | 2019-09-10 | |
| CVE-2019-1552 | Windows builds with insecure path defaults | 3.3 | — | 2019-07-30 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。