Known vulnerabilities in openssl (Ubuntu package) - page 4

Software CPE: cpe:2.3:o:canonical:openssl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 92
Public exploits: 5
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl (Ubuntu package) openssl (Ubuntu package) is affected by 92 known vulnerabilities: 5 high, 56 medium, 31 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116215 - Out-of-bounds read
CVE-2025-9232
CWE-125 Medium
No
No
1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 13 more
#VU116214 - Covert Timing Channel
CVE-2025-9231
CWE-385 Low
No
No
1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.0.2n-1ubuntu5.13+esm2, 1.1.1f-1ubuntu2.24+esm1, 1.1.1-1ubuntu2.1~18.04.23+esm6, 3.0.2-0ubuntu1.20, 3.0.13-0ubuntu3.6, 3.4.1-1ubuntu4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
3.3.1-2ubuntu2.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103600 - Covert Timing Channel
CVE-2024-13176
CWE-385 Medium
No
No
1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1.19, 3.0.13-0ubuntu3.5, 3.3.1-2ubuntu2.1 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU98757 - Out-of-bounds write
CVE-2024-9143
CWE-787 Low
No
No
1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1.19, 3.0.13-0ubuntu3.5, 3.3.1-2ubuntu2.1 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
3.0.2-0ubuntu1.18, 3.0.13-0ubuntu3.4 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
Ubuntu Pro 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.20 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.20 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU77321 - Resource exhaustion
CVE-2022-40735
CWE-400 Medium
No
No
3.0.2-0ubuntu1.16 14.06.2023 SB2023061443
SB2023061445
SB2024070142
and 3 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
Ubuntu Pro 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.18, 1.1.1-1ubuntu2.1~18.04.22, 3.0.2-0ubuntu1.9, 3.0.5-2ubuntu2.2, 3.0.8-1ubuntu1.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.18, 1.1.1-1ubuntu2.1~18.04.22, 3.0.2-0ubuntu1.9, 3.0.5-2ubuntu2.2, 3.0.8-1ubuntu1.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.18, 1.1.1-1ubuntu2.1~18.04.22, 3.0.2-0ubuntu1.9, 3.0.5-2ubuntu2.2, 3.0.8-1ubuntu1.1 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU70142 - Improper Locking
CVE-2022-3996
CWE-667 Low
No
No
Ubuntu Pro, 1.1.1f-1ubuntu2.18, 1.1.1-1ubuntu2.1~18.04.22, 3.0.2-0ubuntu1.9, 3.0.5-2ubuntu2.2, 3.0.8-1ubuntu1.1 13.12.2022 SB2022121328
SB2022122614
SB2023011834
and 12 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068
CWE-78 Medium
No
No
Ubuntu Pro, 1.0.2g1ubuntu4.20+esm5, 1.1.1l-1ubuntu1.5, 1.1.1f-1ubuntu2.15, 1.1.1-1ubuntu2.1~18.04.19, 3.0.2-0ubuntu1.5 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292
CWE-78 Medium
Available
No
Ubuntu Pro 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
Ubuntu Pro 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU46573 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1968
CWE-200 Medium
No
No
Ubuntu Pro 10.09.2020 SB2020091011
SB2020121720
SB2021012078
and 22 more
#VU21044 - Protection Mechanism Failure
CVE-2019-1549
CWE-693 Low
No
No
1.0.2g-1ubuntu4.16, 1.1.1c-1ubuntu4.1, 1.1.1-1ubuntu2.1~18.04.6 11.09.2019 SB2019091112
SB2019100304
SB2020040729
and 9 more


Showing elements 61 - 80 out of 92