Known vulnerabilities in OpenSSL 1.0.2h - page 3

Software: OpenSSL
Version: 1.0.2h
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting OpenSSL version 1.0.2h OpenSSL 1.0.2h is affected by 52 vulnerabilities: 2 high, 28 medium, 22 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15668 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0734
CWE-200 Low
No
No
1.0.2q, 1.1.0j, 1.1.1a 01.11.2018 SB2018110102
SB2018112201
SB2018112602
and 39 more
#VU13325 - Improper input validation
CVE-2018-0732
CWE-20 Low
No
No
1.0.2p, 1.1.0i 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737
CWE-200 Low
No
No
- 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU11294 - Resource exhaustion
CVE-2018-0739
CWE-400 Low
No
No
- 28.03.2018 SB2018032804
SB2018032903
SB2018033002
and 35 more
#VU9595 - Buffer overflow
CVE-2017-3738
CWE-120 Low
No
No
- 08.12.2017 SB2017120804
SB2017120902
SB2017121001
and 18 more
#VU9594 - Improper input validation
CVE-2017-3737
CWE-20 Medium
No
No
- 08.12.2017 SB2017120804
SB2017120902
SB2017121001
and 21 more
#VU9109 - Cryptographic Issues
CVE-2017-3736
CWE-310 Low
No
No
- 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more
#VU8487 - Out-of-bounds read
CVE-2017-3735
CWE-125 Low
No
No
- 28.08.2017 SB2017082906
SB2017110401
SB2017110402
and 30 more
#VU5420 - Out-of-bounds read
CVE-2017-3731
CWE-125 Medium
No
No
- 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 16 more
#VU5442 - Cryptographic Issues
CVE-2017-3732
CWE-310 Low
No
No
- 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 25 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Public exploit available
No
- 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more
#VU308 - Out-of-bounds read
CVE-2016-2180
CWE-125 Medium
No
No
1.0.1u, 1.0.2i 13.08.2016 SB2016081301
SB2018021614
SB2016090301
and 14 more


Showing elements 41 - 60 out of 52