Исправлено в
Проверьте свою версию
openssl versionCVE, затрагивающие 4.0
| CVE | Название | CVSS | Эксплуатируется | EPSS | Опубликовано |
|---|---|---|---|---|---|
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | 9.1 | — | 2026-06-09 | |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | 8.8 | — | 2026-06-09 | |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | 8.1 | — | 2026-06-09 | |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | 7.5 | — | 2026-06-09 | |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | 7.5 | — | 2026-06-09 | |
| CVE-2026-42765 | NULL Dereference in Certificate Verification with OCSP Checking | 7.5 | — | 2026-06-09 | |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | 7.5 | — | 2026-06-09 | |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | 7.5 | — | 2026-06-09 | |
| CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | 7.5 | — | 2026-06-09 | |
| CVE-2026-34181 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys | 7.4 | — | 2026-06-09 | |
| CVE-2026-42771 | Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() | 6.2 | — | 2026-06-09 | |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | 5.9 | — | 2026-06-09 | |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | 5.9 | — | 2026-06-09 | |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | 5.3 | — | 2026-06-09 | |
| CVE-2026-35188 | Double-free When Checking OCSP Stapled Response | 5.0 | — | 2026-06-09 | |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | 4.8 | — | 2026-06-09 | |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | 3.7 | — | 2026-06-09 | |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | 3.7 | — | 2026-06-09 |
Отслеживайте эти версии на своих серверах
InfraGuard собирает версии установленного ПО со всех серверов и отмечает версии с известными уязвимостями. Self-hosted — данные не покидают вашу сеть.
Данные: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (об EPSS см. https://www.first.org/epss), endoflife.date. Список ПО: awesome-selfhosted (CC BY-SA 3.0).