Known vulnerabilities in openssl (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:openssl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 79
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl (Ubuntu package) openssl (Ubuntu package) is affected by 79 known vulnerabilities: 5 high, 47 medium, 27 low Critical High Medium Low

Vulnerabilities (79)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145416 - Double Free
CVE-2026-18798
CWE-415 Medium
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145417 - Out-of-bounds write
CVE-2026-63072
CWE-787 Medium
No
No
1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.0.2n-1ubuntu5.13+esm6, 1.1.1f-1ubuntu2.24+esm5, 1.1.1-1ubuntu2.1~18.04.23+esm10, 3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 7 more
#VU145418 - NULL Pointer Dereference
CVE-2026-63076
CWE-476 Medium
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 4 more
#VU145419 - NULL Pointer Dereference
CVE-2026-14457
CWE-476 Medium
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145420 - Asymmetric Resource Consumption (Amplification)
CVE-2026-54874
CWE-405 Medium
No
No
1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.0.2n-1ubuntu5.13+esm6, 1.1.1f-1ubuntu2.24+esm5, 1.1.1-1ubuntu2.1~18.04.23+esm10, 3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 7 more
#VU145421 - Use of Externally-Controlled Format String
CVE-2026-63073
CWE-134 Medium
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145422 - Allocation of Resources Without Limits or Throttling
CVE-2026-63074
CWE-770 Low
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 4 more
#VU145423 - Allocation of Resources Without Limits or Throttling
CVE-2026-63075
CWE-770 Low
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 2 more
#VU145424 - Improper Validation of Integrity Check Value
CVE-2026-75803
CWE-354 Low
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 26.08.2026 SB2026082627
SB2026082629
SB2026082670
and 3 more
#VU143573 - Allocation of Resources Without Limits or Throttling
CVE-2026-14456
CWE-770 Medium
No
No
3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5 16.08.2026 SB20260816509
SB2026082629
SB2026082670
and 2 more
#VU134272 - Allocation of Resources Without Limits or Throttling
CVE-2026-34183
CWE-770 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 11 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764
CWE-476 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 12 more
#VU134275 - Improper Initialization
CVE-2026-45445
CWE-665 Low
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 20 more
#VU134279 - Improper input validation
CVE-2026-34181
CWE-20 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 11 more
#VU134283 - Observable discrepancy
CVE-2026-42768
CWE-203 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 16 more
#VU134284 - Improper Certificate Validation
CVE-2026-42769
CWE-295 Low
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 11 more
#VU134285 - Improper input validation
CVE-2026-42770
CWE-20 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 19 more
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446
CWE-347 Medium
No
No
3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 17 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.0.2n-1ubuntu5.13+esm6, 1.1.1f-1ubuntu2.24+esm5, 1.1.1-1ubuntu2.1~18.04.23+esm10 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.0.2n-1ubuntu5.13+esm6, 1.1.1f-1ubuntu2.24+esm5, 1.1.1-1ubuntu2.1~18.04.23+esm10 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 91 more


Showing elements 1 - 20 out of 79