Openssl Sårbarheter

Tidslinje

Förra året

Version

1.0.271
1.0.160
0.9.855
1.0.048
1.0.1a41

Åtgärd

Official Fix260
Temporary Fix0
Workaround0
Unavailable2
Not Defined22

Utnyttjbarhet

High7
Functional1
Proof-of-Concept47
Unproven56
Not Defined173

Åtkomstvektor

Not Defined0
Physical0
Local10
Adjacent8
Network266

Autentisering

Not Defined0
High0
Low22
None262

Användarinteraktion

Not Defined0
Required4
None280

C3BM Index

Förra året

CVSSv3 Base

≤10
≤20
≤31
≤420
≤512
≤6119
≤748
≤858
≤910
≤1016

CVSSv3 Temp

≤10
≤20
≤33
≤418
≤546
≤693
≤779
≤821
≤913
≤1011

VulDB

≤10
≤20
≤31
≤435
≤59
≤6138
≤714
≤862
≤91
≤1024

NVD

≤10
≤20
≤30
≤44
≤51
≤636
≤75
≤856
≤93
≤1017

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k0
<2k3
<5k4
<10k13
<25k192
<50k52
<100k18
≥100k2

Utnyttja idag

<1k204
<2k18
<5k26
<10k23
<25k13
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

Förra året

🔴 CTI Aktiviteter

Affected Versions (243): 0.1, 0.2, 0.3, 0.4, 0.5, 0.5.1, 0.5.2, 0.5.3, 0.5.4, 0.5.5, 0.5.6, 0.5.7, 0.5.8, 0.5.9, 0.5.11, 0.5.12, 0.5.13, 0.5.14, 0.5.15, 0.5.16, 0.5.17, 0.5.18, 0.6, 0.7, 0.7.7-1, 0.8, 0.9, 0.9.1c, 0.9.2b, 0.9.3, 0.9.3a, 0.9.4, 0.9.5, 0.9.5a, 0.9.6, 0.9.6-15, 0.9.6a, 0.9.6b, 0.9.6b-3, 0.9.6c, 0.9.6d, 0.9.6e, 0.9.6f, 0.9.6g, 0.9.6h, 0.9.6i, 0.9.6j, 0.9.6k, 0.9.6l, 0.9.6m, 0.9.7, 0.9.7a, 0.9.7a-2, 0.9.7b, 0.9.7c, 0.9.7d, 0.9.7e, 0.9.7f, 0.9.7g, 0.9.7h, 0.9.7i, 0.9.7j, 0.9.7k, 0.9.7l, 0.9.8, 0.9.8a, 0.9.8b, 0.9.8c, 0.9.8d, 0.9.8e, 0.9.8f, 0.9.8f-4, 0.9.8g, 0.9.8h, 0.9.8i, 0.9.8j, 0.9.8k, 0.9.8l, 0.9.8m, 0.9.8n, 0.9.8o, 0.9.8p, 0.9.8q, 0.9.8r, 0.9.8s, 0.9.8t, 0.9.8u, 0.9.8v, 0.9.8w, 0.9.8za, 0.9.8zb, 0.9.8zc, 0.9.8zd, 0.9.8ze, 0.9.8zf, 0.9.8zg, 0.10.1, 0.10.2, 0.10.3, 0.10.4, 0.10.5, 0.10.6, 0.10.7, 0.10.8, 1, 1.0, 1.0.0a, 1.0.0b, 1.0.0c, 1.0.0d, 1.0.0e, 1.0.0f, 1.0.0g, 1.0.0h, 1.0.0i, 1.0.0j, 1.0.0k, 1.0.0l, 1.0.0m, 1.0.0n, 1.0.0o, 1.0.0p, 1.0.0q, 1.0.0r, 1.0.0s, 1.0.1, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1e-25.el7, 1.0.1f, 1.0.1g, 1.0.1h, 1.0.1i, 1.0.1j, 1.0.1k, 1.0.1l, 1.0.1m, 1.0.1n, 1.0.1o, 1.0.1p, 1.0.1q, 1.0.1r, 1.0.1s, 1.0.1t, 1.0.1u, 1.0.2, 1.0.2a, 1.0.2b, 1.0.2c, 1.0.2d, 1.0.2e, 1.0.2f, 1.0.2g, 1.0.2h, 1.0.2i, 1.0.2j, 1.0.2k, 1.0.2l, 1.0.2m, 1.0.2n, 1.0.2o, 1.0.2p, 1.0.2q, 1.0.2r, 1.0.2s, 1.0.2t, 1.0.2u, 1.0.2v, 1.0.2w, 1.0.2y, 1.0.2za, 1.0.2zb, 1.0.2zc, 1.0.2zd, 1.0.2ze, 1.0.2zf, 1.0.2zg, 1.0.2zh, 1.0.2zi, 1.1, 1.1.0a, 1.1.0b, 1.1.0c, 1.1.0d, 1.1.0e, 1.1.0f, 1.1.0g, 1.1.0h, 1.1.0i, 1.1.0j, 1.1.0k, 1.1.1, 1.1.1a, 1.1.1b, 1.1.1c, 1.1.1d, 1.1.1e, 1.1.1f, 1.1.1g, 1.1.1h, 1.1.1i, 1.1.1j, 1.1.1k, 1.1.1l, 1.1.1m, 1.1.1n, 1.1.1o, 1.1.1p, 1.1.1q, 1.1.1r, 1.1.1s, 1.1.1t, 1.1.1u, 1.1.1v, 1.1.1w, 1.1.2, 1.5, 2.0, 3, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.11, 3.0.12, 3.0.13, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.2, 3.2.1

Link to Product Website: https://www.openssl.org/

Programvarutyp: Network Encryption Software

PubliceradBaseTempSårbarhet0dayI dagUtnRemCTICVE
08/04/20245.35.1OpenSSL TLSv1.3 förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-2511
04/04/20243.73.7rust-openssl PKCS 1.5 RSA Encryption Padding Mode informationsgivning$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2024-3296
18/03/20243.73.7Crypt-OpenSSL-RSA PKCS#1 Padding Marvin Attack informationsgivning$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-2467
25/01/20245.45.3OpenSSL förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-0727
15/01/20245.35.1OpenSSL RSA Public Key EVP_PKEY_public_check förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-6237
09/01/20246.05.9OpenSSL POLY1305 MAC svag autentisering$5k-$25k$5k-$25kNot DefinedOfficial Fix0.06CVE-2023-6129
23/11/20237.67.5node-openssl privilegier eskalering$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2023-49210
06/11/20235.35.2OpenSSL X9.42 DH Keys dh_check.c DH_generate_key förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-5678
24/10/20235.55.3OpenSSL Length EVP_CipherInit_ex2 Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-5363
08/09/20237.06.9OpenSSL POLY1305 MAC poly1305-x86_64.pl privilegier eskalering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-4807
31/07/20235.35.2OpenSSL DH Key dh_check.c DH_check förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-3817
19/07/20235.35.2OpenSSL DH Key dh_check.c DH_check förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-3446
14/07/20235.55.4OpenSSL AES-SIV Mode cipher_aes_siv.c siv_cipher svag autentisering$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-2975
30/05/20235.65.5OpenSSL ASN.1 Object Identifier Translation obj_dat.c OBJ_obj2txt förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-2650
10/05/20237.97.8Intel QAT Engine for OpenSSL minneskorruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43507
20/04/20235.65.5OpenSSL AES-XTS aesv8-armx.pl förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-1255
28/03/20235.55.4OpenSSL Certificate Policy Check X509_VERIFY_PARAM_add0_policy svag autentisering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0466
28/03/20235.65.4OpenSSL Leaf Certificate x509_vfy.c check_policy svag autentisering$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0465
22/03/20235.35.2OpenSSL X.509 Certificate X509_VERIFY_PARAM_set1_policies förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-0464
07/02/20236.46.3OpenSSL PKCS7 Data Verification förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-0401
07/02/20236.46.3OpenSSL DSA Public Key EVP_PKEY_public_check förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0217
07/02/20235.35.1OpenSSL d2i_PKCS7_fp förnekande av tjänsten$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-0216
07/02/20236.56.4OpenSSL PEM File PEM_read_bio_ex minneskorruption$5k-$25k$5k-$25kNot DefinedOfficial Fix0.04CVE-2022-4450
07/02/20236.56.4OpenSSL ASN.1 Data BIO_new_NDEF minneskorruption$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-0215
07/02/20235.65.4OpenSSL X.509 Certificate Verification minneskorruption$5k-$25k$5k-$25kNot DefinedOfficial Fix0.00CVE-2022-4203

259 fler poster visas inte

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!