Known vulnerabilities in openssl (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
openssl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openssl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
96
Public exploits:
9
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.5.5-6.el9_8
1.1.1g-18.el8_4.3
3.5.5-5.el9_8
1.1.1k-17.el8_6
3.5.5-4.el9_8
3.5.5-4.el10_2
3.5.5
3.5.5-3.el9_8
3.5.5-2.el9_8
1.1.1c-21.el8_2.2
1.1.1g-18.el8_4.2
3.5.1
1.1.1k-15.el8_6
3.0.1-46.el9_0.7
1.0.2k-26.el7_9.1
3.2.2-16.el10_0.6
3.5.1-7.el9_7
3.0.7-18.el9_2.3
3.0.7-29.el9_4.2
3.2.2-7.el9_6.2
1.1.1g-18.el8_4.1
3.5.1-7.el10_1
3.0.1-46.el9_0.6
1.1.1c-21.el8_2.1
3.0.7-18.el9_2.2
3.5.1-5.el9_7
1.1.1k-14.el8_6.1
1.1.1k-14.el8_8.1
1.1.1k-14.el8_10
3.2.2-16.el10_0.5
3.5.1-3.el9
3.0.7-29.el9_4.1
3.5.1-4.el9_7
3.5.1-4.el10_1
3.2.2-7.el9_6.1
1.0.1e-48.el6_8.4
1.0.1e-60.el7_3.1
1.0.0-20.el6_2.9
1.0.0-27.el6_4.6
1.0.1e-16.el6_5.17
1.0.1e-30.el6_6.13
1.0.1e-42.el6_7.6
1.0.1e-42.el6_7.5
1.0.1e-48.el6_8.3
1.0.1e-51.el7_2.7
1.0.1e-48.el6_8.1
1.0.1e-51.el7_2.5
1.0.1e-42.el6_7.4
0.9.8e-39.el5_11
1.0.0-20.el6_2.8
1.0.0-27.el6_4.5
1.0.1e-16.el6_5.16
0.9.8e-12.el5_6.13
0.9.8e-26.el5_9.5
1.0.1e-30.el6_6.12
0.9.7a-43.23.el4
1.0.1e-42.el6_7.2
0.9.8e-37.el5_11
1.0.1e-42.el6_7.1
1.0.1e-42.el7_1.4
3.2.2-6.el9_5.1
3.2.2-6.el9_5
1.1.1k-14.el8_6
3.0.7-28.el9_4
1.0.2k-21.el7_7.1
0.9.8e-36.el5_11
1.0.1e-30.el6_6.11
0.9.8e-33.el5_11
1.0.1e-30.el6_6.7
1.0.1e-30.el6_6.5
1.0.1e-30.el6_6.2
1.0.1e-34.el7_0.6
0.9.8e-27.el5_10.4
1.0.1e-16.el6_5.15
1.0.1e-34.el7_0.4
1.0.1e-16.el6_5.14
0.9.7a-43.22.el4
0.9.8e-12.el5_6.12
1.0.0-20.el6_2.7
0.9.8e-26.el5_9.4
1.0.0-25.el6_3.3
1.0.0-27.el6_4.4
1.0.1e-16.el6_5.7
1.0.1e-16.el6_5.4
0.9.8e-26.el5_9.1
1.0.0-27.el6_4.2
0.9.8e-22.el5_8.4
1.0.0-20.el6_2.5
0.9.7a-43.20.el4
0.9.8e-12.el5_6.9
1.0.0-10.el6_1.6
0.9.8e-22.el5_8.3
1.0.0-20.el6_2.4
0.9.8e-22.el5_8.1
1.0.0-20.el6_2.3
0.9.7a-43.18.el4
0.9.8e-20.el5_7.1
1.0.0-20.el6_2.1
1.0.0-10.el6_1.5
1.0.0-4.el6_0.2
0.9.8e-12.el5_5.7
0.9.7a-43.17.el4_8.6
1.0.0-4.el6_0.1
0.9.7a-43.17.el4_8.5
0.9.8e-12.el5_4.6
0.9.8e-12.el5_4.1
0.9.8e-12.el5
0.9.7a-43.17.el4_7.2
0.9.8b-10.el5_2.1
0.9.7a-43.17.el4_6.1
0.9.8b-8.3.el5_0.2
3.0.7-27.el9
3.0.7-18.el9_2
1.1.1k-12.el8_6
1.1.1k-12.el8_8
1.1.1k-12.el8_9
3.0.7-16.el9_2
1.1.1k-9.el8_6
3.0.7-6.el9_2
1.1.1c-6.el8_1
1.0.1e-61.el6_10
1.1.1c-21.el8_2
1.1.1g-18.el8_4
1.1.1k-8.el8_6
1.1.1k-9.el8_7
1.0.2k-26.el7_9
3.0.1-46.el9_0
3.0.1-47.el9_1
1.1.1c-16.el8_2
1.0.2k-8.el7
3.0.1-43.el9_0
3.0.1-41.el9_0
1.1.1k-7.el8_6
1.1.1c-5.el8_1.1
1.1.1c-19.el8_2
1.1.1k-6.el8_5
1.0.2k-25.el7_9
1.1.1g-16.el8_4
1.0.2k-10.el7_4
1.0.1e-60.el6_10
1.0.2k-21.el7_7
1.0.2k-18.el7_6
1.0.1e-62.el7_3
1.0.2k-23.el7_9
1.1.1k-5.el8_5
1.1.1k-4.el8
1.0.2k-22.el7_9
1.1.1c-5.el8_1
1.1.1c-18.el8_2
1.1.1g-15.el8_3
1.0.1e-59.el6_10
1.1.1c-3.el8_1
1.0.2k-17.el7_6
1.0.2k-9.el7_4
1.0.1e-61.el7_3
1.0.1e-52.el7_2
1.1.1-9.el8_0
1.0.2k-21.el7_9
1.1.1g-12.el8_3
1.1.1g-11.el8
1.1.1c-15.el8
1.0.0-27.el6_4
1.0.0-27.el6
1.0.0-25.el6_3
1.0.0-20.el6_2
1.0.0-20.el6
1.0.0-10.el6_1
1.0.0-10.el6
1.0.0-4.el6_0
1.0.0-4.el6
Vulnerabilities (96)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097 |
CWE-311 | Low | 1.1.1k-7.el8_6, 3.0.1-41.el9_0 | 05.07.2022 |
SB2022070509 SB2022070522 SB2022070531 and 112 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | 1.1.1k-7.el8_6, 3.0.1-41.el9_0 | 21.06.2022 |
SB2022062120 SB2022062125 SB2022062236 and 135 more |
||
| #VU62768 - Uncontrolled Memory Allocation CVE-2022-1473 |
CWE-789 | Low | 3.0.1-41.el9_0 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050532 and 18 more |
||
| #VU62766 - Security Features CVE-2022-1343 |
CWE-254 | Medium | 3.0.1-41.el9_0 | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050532 and 14 more |
||
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 1.0.1e-60.el6_10, 1.0.1e-62.el7_3, 1.0.2k-10.el7_4, 1.0.2k-18.el7_6, 1.0.2k-21.el7_7, 1.0.2k-25.el7_9, 1.1.1c-5.el8_1.1, 1.1.1c-19.el8_2, 1.1.1g-16.el8_4, 1.1.1k-6.el8_5 | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
||
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 1.0.2k-23.el7_9, 1.1.1k-5.el8_5 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 1.1.1c-5.el8_1, 1.1.1c-18.el8_2, 1.1.1g-15.el8_3 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 1.1.1g-15.el8_3 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU50745 - Improper input validation CVE-2021-23840 |
CWE-20 | Medium | 1.0.2k-22.el7_9, 1.1.1k-4.el8 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 83 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 1.0.2k-22.el7_9, 1.1.1k-4.el8 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 1.0.1e-52.el7_2, 1.0.1e-59.el6_10, 1.0.1e-61.el7_3, 1.0.2k-9.el7_4, 1.0.2k-17.el7_6, 1.0.2k-21.el7_9, 1.1.1c-3.el8_1, 1.1.1c-16.el8_2, 1.1.1g-12.el8_3, 1.1.1-9.el8_0 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU23451 - Cryptographic Issues CVE-2019-1551 |
CWE-310 | Low | 1.1.1g-11.el8 | 08.12.2019 |
SB2019120802 SB2019122101 SB2019122807 and 24 more |
||
| #VU21045 - Cryptographic Issues CVE-2019-1563 |
CWE-310 | Low | 1.1.1c-15.el8 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 27 more |
||
| #VU21044 - Protection Mechanism Failure CVE-2019-1549 |
CWE-693 | Low | 1.1.1c-15.el8 | 11.09.2019 |
SB2019091112 SB2019100304 SB2020040729 and 9 more |
||
| #VU21043 - Cryptographic Issues CVE-2019-1547 |
CWE-310 | Low | 1.1.1c-15.el8 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 39 more |
||
| #VU5420 - Out-of-bounds read CVE-2017-3731 |
CWE-125 | Medium | 1.0.1e-48.el6_8.4, 1.0.1e-60.el7_3.1 | 27.01.2017 |
SB2017012701 SB2017022301 SB2017021407 and 16 more |
||
| #VU4133 - Cryptographic Issues CVE-2016-7056 |
CWE-310 | Low | 1.0.2k-8.el7 | 10.01.2017 |
SB2017011002 SB2017060704 SB2017013102 and 4 more |
||
| #VU1083 - Error Handling CVE-2016-8610 |
CWE-388 | Low | 1.0.1e-48.el6_8.4, 1.0.1e-60.el7_3.1 | 24.10.2016 |
SB2017060704 SB2017032005 SB2017020101 and 17 more |
||
| #VU370 - Use of a Broken or Risky Cryptographic Algorithm CVE-2016-2183 |
CWE-327 | Low | 1.0.1e-48.el6_8.3, 1.0.1e-51.el7_2.7 | 08.09.2016 |
SB2016082601 SB2017053118 SB2017011701 and 49 more |
||
| #VU24 - Download of Code Without Integrity Check CVE-2016-2177 |
CWE-119 | Medium | 1.0.1e-48.el6_8.3, 1.0.1e-51.el7_2.7 | 24.06.2016 |
SB2016081301 SB2017013102 SB2018021614 and 19 more |
Showing elements 61 - 80 out of 96