Known vulnerabilities in openssl

Vendor: SUSE
Software: openssl
Software CPE: cpe:2.3:o:suse:openssl:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssl openssl is affected by 31 known vulnerabilities: 2 high, 21 medium, 8 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 3.5.0-150700.3.4.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 20 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 3.5.0-150700.3.4.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 11 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 3.5.0-150700.3.4.1 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 50 more
#VU125561 - Always-Incorrect Control Flow Implementation
CVE-2026-2673		 CWE-670 Low
No
No
 3.5.0-150700.3.4.1 09.04.2026 SB2026040943
SB2026040944
SB20260409112
and 5 more
#VU122079 - Resource exhaustion
CVE-2025-66199		 CWE-400 Medium
No
No
 3.5.0-150700.3.4.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469		 CWE-197 Low
No
No
 3.5.0-150700.3.4.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 15 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468		 CWE-476 Medium
No
No
 3.5.0-150700.3.4.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 19 more
#VU122075 - Stack-based buffer overflow
CVE-2025-11187		 CWE-121 Medium
No
No
 3.5.0-150700.3.4.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 20 more
#VU117442 - Improper input validation
CVE-2025-27587		 CWE-20 Medium
No
No
 3.5.0-150700.3.4.1 22.10.2025 SB2025102223
SB2025102247
SB20260827159
#VU116215 - Out-of-bounds read
CVE-2025-9232		 CWE-125 Medium
No
No
 3.5.0-150700.3.4.1 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 13 more
#VU116214 - Covert Timing Channel
CVE-2025-9231		 CWE-385 Low
No
No
 3.5.0-150700.3.4.1 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU109657 - Expected Behavior Violation
CVE-2025-4575		 CWE-440 Low
No
No
 3.5.0-150700.3.4.1 22.05.2025 SB2025052235
SB20251022138
SB20260120168
and 1 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 3.5.0-150700.3.4.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 3.5.0-150700.3.4.1 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 3.5.0-150700.3.4.1 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 0.9.8j-0.106.80.1 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 1.0.2j-60.104.1 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 0.9.8j-0.106.77.1, 1.0.2j-60.101.1 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 0.9.8j-0.106.71.1, 1.0.2j-60.95.1 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 0.9.8j-0.106.66.1, 1.0.2j-60.92.1 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more


Showing elements 1 - 20 out of 31