Known vulnerabilities in openssl (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:openssl_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 92
Public exploits: 6
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl (Debian package) openssl (Debian package) is affected by 92 known vulnerabilities: 6 high, 55 medium, 31 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152953 - Allocation of Resources Without Limits or Throttling
CVE-2026-35189
CWE-770 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001103
and 11 more
#VU152954 - Expected Behavior Violation
CVE-2026-35191
CWE-440 Low
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 2 more
#VU152955 - Inefficient Algorithmic Complexity
CVE-2026-42772
CWE-407 Low
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB2026100195
and 1 more
#VU152956 - Information Exposure Through Timing Discrepancy
CVE-2026-54872
CWE-208 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001103
and 10 more
#VU152957 - Allocation of Resources Without Limits or Throttling
CVE-2026-54873
CWE-770 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB2026100195
and 1 more
#VU152958 - Information Exposure Through Timing Discrepancy
CVE-2026-54875
CWE-208 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 4 more
#VU152959 - Out-of-bounds write
CVE-2026-72897
CWE-787 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 2 more
#VU152960 - Allocation of Resources Without Limits or Throttling
CVE-2026-75804
CWE-770 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 2 more
#VU152961 - NULL Pointer Dereference
CVE-2026-75805
CWE-476 Low
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 9 more
#VU152962 - Improper Validation of Specified Quantity in Input
CVE-2026-75806
CWE-1284 Low
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 11 more
#VU152963 - Information Exposure Through Timing Discrepancy
CVE-2026-77696
CWE-208 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001103
and 12 more
#VU152964 - Allocation of Resources Without Limits or Throttling
CVE-2026-84784
CWE-770 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093091
SB20261001112
and 2 more
#VU152944 - Out-of-bounds read
CVE-2026-84782
CWE-125 Medium
No
No
3.5.7-1~deb13u3 30.09.2026 SB2026093079
SB2026093080
SB2026093091
and 20 more
#VU145416 - Double Free
CVE-2026-18798
CWE-415 Medium
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 5 more
#VU145417 - Out-of-bounds write
CVE-2026-63072
CWE-787 Medium
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 38 more
#VU145419 - NULL Pointer Dereference
CVE-2026-14457
CWE-476 Medium
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 7 more
#VU145420 - Asymmetric Resource Consumption (Amplification)
CVE-2026-54874
CWE-405 Medium
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 27 more
#VU145421 - Use of Externally-Controlled Format String
CVE-2026-63073
CWE-134 Medium
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 5 more
#VU145422 - Allocation of Resources Without Limits or Throttling
CVE-2026-63074
CWE-770 Low
No
No
3.5.7-1~deb13u2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 12 more
#VU143573 - Allocation of Resources Without Limits or Throttling
CVE-2026-14456
CWE-770 Medium
No
No
3.5.7-1~deb13u2 16.08.2026 SB20260816509
SB2026082629
SB2026082670
and 5 more


Showing elements 1 - 20 out of 92