수정 버전
설치된 버전 확인
openssl version3.0 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2022-2274 | RSA implementation bug in AVX512IFMA instructions | 9.8 | — | 2022-07-01 | |
| CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | — | 2022-03-15 | |
| CVE-2022-3602 | X.509 Email Address 4-byte Buffer Overflow | 7.5 | — | 2022-11-01 | |
| CVE-2022-3358 | Using a Custom Cipher with NID_undef may lead to NULL encryption | 7.5 | — | 2022-10-11 | |
| CVE-2022-1473 | Resource leakage when decoding certificates and keys | 7.5 | — | 2022-05-03 | |
| CVE-2023-0217 | NULL dereference validating DSA public key | 7.5 | — | 2023-02-08 | |
| CVE-2021-4044 | Invalid handling of X509_verify_cert() internal errors in libssl | 7.5 | — | 2021-12-14 | |
| CVE-2023-0401 | NULL dereference during PKCS7 data verification | 7.5 | — | 2023-02-08 | |
| CVE-2023-0216 | Invalid pointer dereference in d2i_PKCS7 functions | 7.5 | — | 2023-02-08 | |
| CVE-2022-1292 | The c_rehash script allows command injection | 7.3 | — | 2022-05-03 | |
| CVE-2022-2068 | The c_rehash script allows command injection | 7.3 | — | 2022-06-21 | |
| CVE-2023-6129 | POLY1305 MAC implementation corrupts vector registers on PowerPC | 6.5 | — | 2024-01-09 | |
| CVE-2025-9232 | Out-of-bounds read in HTTP client no_proxy handling | 5.9 | — | 2025-09-30 | |
| CVE-2025-9231 | Timing side-channel in SM2 algorithm on 64 bit ARM | 5.9 | — | 2025-09-30 | |
| CVE-2022-1434 | Incorrect MAC key used in the RC4-MD5 ciphersuite | 5.9 | — | 2022-05-03 | |
| CVE-2021-4160 | BN_mod_exp may produce incorrect results on MIPS | 5.9 | — | 2022-01-28 | |
| CVE-2022-2097 | AES OCB fails to encrypt some bytes | 5.3 | — | 2022-07-05 | |
| CVE-2023-2975 | AES-SIV implementation ignores empty associated data entries | 5.3 | — | 2023-07-14 | |
| CVE-2022-1343 | OCSP_basic_verify may incorrectly verify the response signing certificate | 5.3 | — | 2022-05-03 | |
| CVE-2023-3446 | Excessive time spent checking DH keys and parameters | 5.3 | — | 2023-07-19 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).