Known vulnerabilities in OpenSSL - page 5

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 243
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 243 known vulnerabilities: 2 critical, 15 high, 146 medium, 80 low Critical High Medium Low

Vulnerabilities (243)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80565 - Improper input validation
CVE-2023-4807
CWE-20 Low
No
No
1.1.1w 08.09.2023 SB2023090834
SB2023092109
SB2023110126
and 45 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
1.0.2zi, 1.1.1v, 3.0.10, 3.1.2 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
1.0.2zi, 1.1.1v, 3.0.10, 3.1.2 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78265 - Improper Authentication
CVE-2023-2975
CWE-287 Low
No
No
3.0.10, 3.1.2 15.07.2023 SB2023071506
SB2023072844
SB2023072846
and 37 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75388 - Out-of-bounds read
CVE-2023-1255
CWE-125 Low
No
No
3.0.9, 3.1.1 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
1.0.2zh, 1.1.1u, 3.0.9, 3.1.1 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more
#VU71999 - NULL Pointer Dereference
CVE-2023-0401
CWE-476 Medium
No
No
3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 52 more
#VU71998 - NULL Pointer Dereference
CVE-2023-0217
CWE-476 Medium
No
No
3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 49 more
#VU71997 - Release of invalid pointer or reference
CVE-2023-0216
CWE-763 Medium
No
No
3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 50 more
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
1.1.1t, 3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
1.0.2zg, 1.1.1t, 3.0.8 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71994 - Out-of-bounds read
CVE-2022-4203
CWE-125 Medium
No
No
3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020774
and 47 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
1.0.2zg, 1.1.1t, 3.0.8 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
1.0.2zg, 1.1.1t, 3.0.8 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU70142 - Improper Locking
CVE-2022-3996
CWE-667 Low
No
No
3.0.8 13.12.2022 SB2022121328
SB2022122614
SB2023011834
and 12 more
#VU68896 - Memory corruption
CVE-2022-3786
CWE-119 Medium
Available
No
3.0.7 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 44 more
#VU68895 - Memory corruption
CVE-2022-3602
CWE-119 High
Available
No
3.0.7 01.11.2022 SB2022110132
SB2022110133
SB2022110144
and 45 more


Showing elements 81 - 100 out of 243