Openssl Уязвимости

Временная шкала

Последний год

Версия

1.0.271
1.0.160
0.9.855
1.0.048
1.0.1a41

Устранение последствий

Official Fix260
Temporary Fix0
Workaround0
Unavailable2
Not Defined22

Эксплуатационная пригодность

High7
Functional1
Proof-of-Concept47
Unproven56
Not Defined173

Вектор доступа

Not Defined0
Physical0
Local10
Adjacent8
Network266

Аутентификация

Not Defined0
High0
Low22
None262

Взаимодействие с пользователем

Not Defined0
Required4
None280

C3BM Index

Последний год

CVSSv3 Base

≤10
≤20
≤31
≤418
≤514
≤6119
≤748
≤858
≤910
≤1016

CVSSv3 Temp

≤10
≤20
≤33
≤416
≤548
≤693
≤778
≤822
≤913
≤1011

VulDB

≤10
≤20
≤31
≤435
≤59
≤6138
≤714
≤862
≤91
≤1024

NVD

≤10
≤20
≤30
≤44
≤51
≤636
≤75
≤856
≤93
≤1017

CNA

≤10
≤20
≤30
≤40
≤50
≤63
≤70
≤81
≤90
≤100

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k0
<2k3
<5k4
<10k13
<25k192
<50k52
<100k18
≥100k2

Эксплойт сегодня

<1k201
<2k17
<5k31
<10k21
<25k14
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

Последний год

🔴 CTI Деятельность

Affected Versions (243): 0.1, 0.2, 0.3, 0.4, 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5, 0.5.6, 0.5.7, 0.5.8, 0.5.9, 0.5.11, 0.5.12, 0.5.13, 0.5.14, 0.5.15, 0.5.16, 0.5.17, 0.5.18, 0.6, 0.7, 0.7.7-1, 0.8, 0.9, 0.9.1c, 0.9.2b, 0.9.3, 0.9.3a, 0.9.4, 0.9.5, 0.9.5a, 0.9.6, 0.9.6-15, 0.9.6a, 0.9.6b, 0.9.6b-3, 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.6l, 0.9.6m, 0.9.7, 0.9.7a, 0.9.7a-2, 0.9.7b, 0.9.7c, 0.9.7d, 0.9.7e, 0.9.7f, 0.9.7g, 0.9.7h, 0.9.7i, 0.9.7j, 0.9.7k, 0.9.7l, 0.9.8, 0.9.8a, 0.9.8b, 0.9.8c, 0.9.8d, 0.9.8e, 0.9.8f, 0.9.8f-4, 0.9.8g, 0.9.8h, 0.9.8i, 0.9.8j, 0.9.8k, 0.9.8l, 0.9.8m, 0.9.8n, 0.9.8o, 0.9.8p, 0.9.8q, 0.9.8r, 0.9.8s, 0.9.8t, 0.9.8u, 0.9.8v, 0.9.8w, 0.9.8za, 0.9.8zb, 0.9.8zc, 0.9.8zd, 0.9.8ze, 0.9.8zf, 0.9.8zg, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.10.7, 0.10.8, 1, 1.0, 1.0.0a, 1.0.0b, 1.0.0c, 1.0.0d, 1.0.0e, 1.0.0f, 1.0.0g, 1.0.0h, 1.0.0i, 1.0.0j, 1.0.0k, 1.0.0l, 1.0.0m, 1.0.0n, 1.0.0o, 1.0.0p, 1.0.0q, 1.0.0r, 1.0.0s, 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1e-25.el7, 1.0.1f, 1.0.1g, 1.0.1h, 1.0.1i, 1.0.1j, 1.0.1k, 1.0.1l, 1.0.1m, 1.0.1n, 1.0.1o, 1.0.1p, 1.0.1q, 1.0.1r, 1.0.1s, 1.0.1t, 1.0.1u, 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d, 1.0.2e, 1.0.2f, 1.0.2g, 1.0.2h, 1.0.2i, 1.0.2j, 1.0.2k, 1.0.2l, 1.0.2m, 1.0.2n, 1.0.2o, 1.0.2p, 1.0.2q, 1.0.2r, 1.0.2s, 1.0.2t, 1.0.2u, 1.0.2v, 1.0.2w, 1.0.2y, 1.0.2za, 1.0.2zb, 1.0.2zc, 1.0.2zd, 1.0.2ze, 1.0.2zf, 1.0.2zg, 1.0.2zh, 1.0.2zi, 1.1, 1.1.0a, 1.1.0b, 1.1.0c, 1.1.0d, 1.1.0e, 1.1.0f, 1.1.0g, 1.1.0h, 1.1.0i, 1.1.0j, 1.1.0k, 1.1.1, 1.1.1a, 1.1.1b, 1.1.1c, 1.1.1d, 1.1.1e, 1.1.1f, 1.1.1g, 1.1.1h, 1.1.1i, 1.1.1j, 1.1.1k, 1.1.1l, 1.1.1m, 1.1.1n, 1.1.1o, 1.1.1p, 1.1.1q, 1.1.1r, 1.1.1s, 1.1.1t, 1.1.1u, 1.1.1v, 1.1.1w, 1.1.2, 1.5, 2.0, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.11, 3.0.12, 3.0.13, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.2, 3.2.1

Link to Product Website: https://www.openssl.org/

Тип программного обеспечения: Network Encryption Software

ОпубликованоBaseTempУязвимости0dayСегодняЭ�RemCTICVE
08.04.20245.35.1OpenSSL TLSv1.3 отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.18CVE-2024-2511
04.04.20244.84.8rust-openssl PKCS 1.5 RSA Encryption Padding Mode раскрытие информации$5k-$25k$5k-$25kNot DefinedNot Defined0.07CVE-2024-3296
18.03.20244.84.8Crypt-OpenSSL-RSA PKCS#1 Padding Marvin Attack раскрытие информации$0-$5k$0-$5kNot DefinedNot Defined0.08CVE-2024-2467
25.01.20245.45.3OpenSSL отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-0727
15.01.20245.35.1OpenSSL RSA Public Key EVP_PKEY_public_check отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2023-6237
09.01.20246.05.9OpenSSL POLY1305 MAC слабая аутентификация$5k-$25k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-6129
23.11.20237.67.5node-openssl эскалация привилегий$5k-$25k$5k-$25kNot DefinedNot Defined0.04CVE-2023-49210
06.11.20235.35.2OpenSSL X9.42 DH Keys dh_check.c DH_generate_key отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-5678
24.10.20235.55.3OpenSSL Length EVP_CipherInit_ex2 Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-5363
08.09.20237.06.9OpenSSL POLY1305 MAC poly1305-x86_64.pl эскалация привилегий$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-4807
31.07.20235.35.2OpenSSL DH Key dh_check.c DH_check отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-3817
19.07.20235.35.2OpenSSL DH Key dh_check.c DH_check отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-3446
14.07.20235.55.4OpenSSL AES-SIV Mode cipher_aes_siv.c siv_cipher слабая аутентификация$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-2975
30.05.20235.65.5OpenSSL ASN.1 Object Identifier Translation obj_dat.c OBJ_obj2txt отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-2650
10.05.20237.97.8Intel QAT Engine for OpenSSL повреждение памяти$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-43507
20.04.20235.65.5OpenSSL AES-XTS aesv8-armx.pl отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1255
28.03.20235.55.4OpenSSL Certificate Policy Check X509_VERIFY_PARAM_add0_policy слабая аутентификация$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-0466
28.03.20235.65.4OpenSSL Leaf Certificate x509_vfy.c check_policy слабая аутентификация$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0465
22.03.20235.35.2OpenSSL X.509 Certificate X509_VERIFY_PARAM_set1_policies отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-0464
07.02.20236.46.3OpenSSL PKCS7 Data Verification отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-0401
07.02.20236.46.3OpenSSL DSA Public Key EVP_PKEY_public_check отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0217
07.02.20235.35.1OpenSSL d2i_PKCS7_fp отказ в обслуживании$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0216
07.02.20236.56.4OpenSSL PEM File PEM_read_bio_ex повреждение памяти$5k-$25k$5k-$25kNot DefinedOfficial Fix0.04CVE-2022-4450
07.02.20236.56.4OpenSSL ASN.1 Data BIO_new_NDEF повреждение памяти$5k-$25k$5k-$25kNot DefinedOfficial Fix0.04CVE-2023-0215
07.02.20235.65.4OpenSSL X.509 Certificate Verification повреждение памяти$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-4203

259 больше записей не показано

Want to stay up to date on a daily basis?

Enable the mail alert feature now!