Known vulnerabilities in openssl (Ubuntu package) - page 3

Software CPE: cpe:2.3:o:canonical:openssl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 79
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl (Ubuntu package) openssl (Ubuntu package) is affected by 79 known vulnerabilities: 5 high, 47 medium, 27 low Critical High Medium Low

Vulnerabilities (79)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122080 - Out-of-bounds write
CVE-2025-68160
CWE-787 Medium
No
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122079 - Resource exhaustion
CVE-2025-66199
CWE-400 Medium
No
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469
CWE-197 Low
No
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 15 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468
CWE-476 Medium
No
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 19 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467
CWE-121 High
Available
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 66 more
#VU122075 - Stack-based buffer overflow
CVE-2025-11187
CWE-121 Medium
No
No
1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.0.2n-1ubuntu5.13+esm3, 1.1.1f-1ubuntu2.24+esm2, 1.1.1-1ubuntu2.1~18.04.23+esm7, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.5.3-1ubuntu3 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 20 more
#VU116215 - Out-of-bounds read
CVE-2025-9232
CWE-125 Medium
No
No
1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 13 more
#VU116214 - Covert Timing Channel
CVE-2025-9231
CWE-385 Low
No
No
1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
3.3.1-2ubuntu2.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103600 - Covert Timing Channel
CVE-2024-13176
CWE-385 Medium
No
No
1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1.19, 3.0.13-0ubuntu3.5, 3.3.1-2ubuntu2.1 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU98757 - Out-of-bounds write
CVE-2024-9143
CWE-787 Low
No
No
1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1.19, 3.0.13-0ubuntu3.5, 3.3.1-2ubuntu2.1 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
3.0.2-0ubuntu1.18, 3.0.13-0ubuntu3.4 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
Ubuntu Pro 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.20 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.20 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU77321 - Resource exhaustion
CVE-2022-40735
CWE-400 Medium
No
No
3.0.2-0ubuntu1.16 14.06.2023 SB2023061443
SB2023061445
SB2024070142
and 3 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
Ubuntu Pro 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
Ubuntu Pro 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU46573 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1968
CWE-200 Medium
No
No
Ubuntu Pro 10.09.2020 SB2020091011
SB2020121720
SB2021012078
and 22 more


Showing elements 41 - 60 out of 79