Known vulnerabilities in libopenssl-fips-provider
Vendor:
SUSE
Software:
libopenssl-fips-provider
Software CPE:
cpe:2.3:o:suse:libopenssl-fips-provider:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134271 - Improper input validation CVE-2026-34182 |
CWE-20 | High | 3.5.0-150700.3.4.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 20 more |
||
| #VU134274 - NULL Pointer Dereference CVE-2026-42764 |
CWE-476 | Medium | 3.5.0-150700.3.4.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 11 more |
||
| #VU125567 - NULL Pointer Dereference CVE-2026-28390 |
CWE-476 | Medium | 3.5.0-150700.3.4.1 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040992 and 50 more |
||
| #VU125561 - Always-Incorrect Control Flow Implementation CVE-2026-2673 |
CWE-670 | Low | 3.5.0-150700.3.4.1 | 09.04.2026 |
SB2026040943 SB2026040944 SB20260409112 and 5 more |
||
| #VU122079 - Resource exhaustion CVE-2025-66199 |
CWE-400 | Medium | 3.5.0-150700.3.4.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 18 more |
||
| #VU122078 - Numeric Truncation Error CVE-2025-15469 |
CWE-197 | Low | 3.5.0-150700.3.4.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 15 more |
||
| #VU122077 - NULL Pointer Dereference CVE-2025-15468 |
CWE-476 | Medium | 3.5.0-150700.3.4.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 19 more |
||
| #VU122075 - Stack-based buffer overflow CVE-2025-11187 |
CWE-121 | Medium | 3.5.0-150700.3.4.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 20 more |
||
| #VU117442 - Improper input validation CVE-2025-27587 |
CWE-20 | Medium | 3.5.0-150700.3.4.1 | 22.10.2025 |
SB2025102223 SB2025102247 SB20260827159 |
||
| #VU116215 - Out-of-bounds read CVE-2025-9232 |
CWE-125 | Medium | 3.5.0-150700.3.4.1 | 01.10.2025 |
SB2025100119 SB2025100139 SB2025100153 and 13 more |
||
| #VU116214 - Covert Timing Channel CVE-2025-9231 |
CWE-385 | Low | 3.5.0-150700.3.4.1 | 01.10.2025 |
SB2025100119 SB2025100139 SB2025100153 and 10 more |
||
| #VU109657 - Expected Behavior Violation CVE-2025-4575 |
CWE-440 | Low | 3.5.0-150700.3.4.1 | 22.05.2025 |
SB2025052235 SB20251022138 SB20260120168 and 1 more |
||
| #VU103771 - Improper Authentication CVE-2024-12797 |
CWE-287 | Medium | 3.5.0-150700.3.4.1 | 11.02.2025 |
SB2025021187 SB20250211108 SB20250211159 and 60 more |
||
| #VU103600 - Covert Timing Channel CVE-2024-13176 |
CWE-385 | Medium | 3.5.0-150700.3.4.1 | 04.02.2025 |
SB2025020454 SB2025020456 SB2025020656 and 59 more |
||
| #VU98757 - Out-of-bounds write CVE-2024-9143 |
CWE-787 | Low | 3.5.0-150700.3.4.1 | 16.10.2024 |
SB20241016108 SB2024102219 SB2024102417 and 59 more |