Known vulnerabilities in OpenSSL - page 3

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116215 - Out-of-bounds read
CVE-2025-9232
CWE-125 Medium
No
No
3.0.18, 3.2.6, 3.3.5, 3.4.3, 3.5.4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 12 more
#VU116214 - Covert Timing Channel
CVE-2025-9231
CWE-385 Low
No
No
3.2.6, 3.3.5, 3.4.3, 3.5.4 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 9 more
#VU116213 - Out-of-bounds write
CVE-2025-9230
CWE-787 Medium
No
No
1.0.2zm, 1.1.1zd, 3.0.18, 3.2.6, 3.3.5, 3.4.3, 3.5.4 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU109657 - Expected Behavior Violation
CVE-2025-4575
CWE-440 Low
No
No
- 22.05.2025 SB2025052235
SB20251022138
SB20260120168
#VU103771 - Improper Authentication
CVE-2024-12797
CWE-287 Medium
No
No
3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 59 more
#VU103600 - Covert Timing Channel
CVE-2024-13176
CWE-385 Medium
No
No
1.0.2zl, 1.1.1zb, 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.1 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 58 more
#VU98757 - Out-of-bounds write
CVE-2024-9143
CWE-787 Low
No
No
1.0.2zl, 1.1.1zb, 3.0.16, 3.1.8, 3.2.4, 3.3.3 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 58 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
3.0.15, 3.1.7, 3.2.3, 3.3.2 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
1.0.2zk, 1.1.1za, 3.0.15, 3.1.7, 3.2.3, 3.3.2 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 155 more
#VU89861 - Use After Free
CVE-2024-4741
CWE-416 Medium
No
No
1.1.1y, 3.0.14, 3.1.6, 3.2.2, 3.3.1 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 88 more
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
- 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
1.1.1y, 3.0.14, 3.1.6, 3.2.2, 3.3.1 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 90 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
1.0.2zj, 1.1.1x, 3.0.13, 3.1.5, 3.2.1 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85399 - Resource Management Errors
CVE-2023-6237
CWE-399 Low
No
No
3.0.13, 3.1.5, 3.2.1 15.01.2024 SB2024011522
SB2024012250
SB2024012612
and 53 more
#VU85170 - State Issues
CVE-2023-6129
CWE-371 Medium
No
No
3.0.13, 3.1.5, 3.2.1 09.01.2024 SB2024010929
SB2024012250
SB2024012612
and 69 more
#VU82894 - Resource Management Errors
CVE-2023-5678
CWE-399 Medium
No
No
1.0.2zj, 1.1.1x, 3.0.13, 3.1.5 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU82349 - Cryptographic Issues
CVE-2023-5363
CWE-310 Low
No
No
3.0.12, 3.1.4 24.10.2023 SB2023102443
SB2023102448
SB2023102534
and 46 more
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
1.1.1w 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
1.0.2zi, 1.1.1v, 3.0.10, 3.1.2 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
1.0.2zi, 1.1.1v, 3.0.10, 3.1.2 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more


Showing elements 41 - 60 out of 220