Known vulnerabilities in openssl (Alpine package)

Vendor: Alpine Linux Development Team
Software: openssl (Alpine package)
Software CPE: cpe:2.3:o:alpine:openssl_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 66
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl (Alpine package) openssl (Alpine package) is affected by 66 known vulnerabilities: 8 high, 34 medium, 24 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 1.1.1i-r0 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU27061 - NULL Pointer Dereference
CVE-2020-1967		 CWE-476 Medium
Available
No
 1.1.1g-r0 21.04.2020 SB2020042130
SB2020042131
SB2020042326
and 19 more
#VU23451 - Cryptographic Issues
CVE-2019-1551		 CWE-310 Low
No
No
 1.0.2u-r0, 1.1.1d-r2 08.12.2019 SB2019120802
SB2019122101
SB2019122807
and 24 more
#VU21045 - Cryptographic Issues
CVE-2019-1563		 CWE-310 Low
No
No
 1.0.2t-r0, 1.1.1d-r0 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 27 more
#VU21044 - Protection Mechanism Failure
CVE-2019-1549		 CWE-693 Low
No
No
 1.1.1d-r0 11.09.2019 SB2019091112
SB2019100304
SB2020040729
and 9 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 1.0.2t-r0, 1.1.1d-r0 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU17908 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1543		 CWE-327 Low
No
No
 1.1.1b-r1 06.03.2019 SB2019030602
SB2019040410
SB2019061209
and 13 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559		 CWE-327 Low
No
No
 1.0.2r-r0 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU15723 - Information Exposure Through Timing Discrepancy
CVE-2018-5407		 CWE-208 Low
Available
No
 1.0.2q-r0 06.11.2018 SB2018110602
SB2018111301
SB2018112201
and 30 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 1.0.2o-r1 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737		 CWE-200 Low
No
No
 1.0.2o-r1 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU9109 - Cryptographic Issues
CVE-2017-3736		 CWE-310 Low
No
No
 1.0.2m-r0, 1.0.2n-r0 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more
#VU8487 - Out-of-bounds read
CVE-2017-3735		 CWE-125 Low
No
No
 1.0.2m-r0, 1.0.2n-r0 28.08.2017 SB2017082906
SB2017110401
SB2017110402
and 30 more
#VU5894 - Cryptographic Issues
CVE-2016-7055		 CWE-310 Low
No
No
 1.0.2k-r0 23.02.2017 SB2016101004
SB2017022301
SB2017021407
and 10 more
#VU5420 - Out-of-bounds read
CVE-2017-3731		 CWE-125 Medium
No
No
 1.0.2k-r0 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 16 more
#VU5442 - Cryptographic Issues
CVE-2017-3732		 CWE-310 Low
No
No
 1.0.2k-r0 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 25 more
#VU820 - Buffer overflow
CVE-2016-6305		 CWE-120 Low
No
No
 1.0.1u-r0 10.10.2016 SB2016092206
SB2016092235
SB2016120705
and 1 more
#VU817 - Resource exhaustion
CVE-2016-6307		 CWE-400 Low
No
No
 - 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU816 - Out-of-bounds read
CVE-2016-6306		 CWE-125 Low
No
No
 1.0.2i-r0 10.10.2016 SB2018021614
SB2016092238
SB2023022033
and 17 more
#VU660 - NULL Pointer Dereference
CVE-2016-7052		 CWE-476 Medium
No
No
 1.0.2j-r0 26.09.2016 SB2016092602
SB2016092803
SB2016092705
and 8 more


Showing elements 1 - 20 out of 66