Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 0.9.7k vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-0076
The Montgomery ladder implementation in OpenSSL up to and including 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 0.9.7cOpenssl Openssl 1.0.0Openssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8u
NA
CVE-2013-0166
OpenSSL prior to 0.9.8y, 1.0.0 prior to 1.0.0k, and 1.0.1 prior to 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 1.0.1cOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8u
NA
CVE-2012-2333
Integer underflow in OpenSSL prior to 0.9.8x, 1.0.0 prior to 1.0.0j, and 1.0.1 prior to 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via ...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl OpensslOpenssl Openssl 0.9.8vOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6eRedhat Openssl 0.9.6-15Openssl Openssl 0.9.8uOpenssl Openssl 0.9.8tOpenssl Openssl 0.9.8s
NA
CVE-2012-2110
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL prior to 0.9.8v, 1.0.0 prior to 1.0.0i, and 1.0.1 prior to 1.0.1a does not properly interpret integer data, which allows remote malicious users to conduct buffer overflow attacks, and cause a denial of service (m...
Openssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl OpensslOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6m
NA
CVE-2012-1165
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL prior to 0.9.8u and 1.x prior to 1.0.0h allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-20...
Openssl Openssl 0.9.8pOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.5Openssl Openssl 0.9.3aOpenssl Openssl 0.9.3Openssl Openssl
NA
CVE-2012-0884
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL prior to 0.9.8u and 1.x prior to 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent malicious users to decrypt data via a Million Message Attack (MM...
Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0aOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6Openssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8
NA
CVE-2006-7250
The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and previous versions allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
Openssl OpensslOpenssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.4Openssl Openssl 0.9.8gOpenssl Openssl 0.9.8k
NA
CVE-2011-4354
crypto/bn/bn_nist.c in OpenSSL prior to 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curv...
Openssl Openssl 0.9.8Openssl Openssl 0.9.8aOpenssl Openssl 0.9.2bOpenssl Openssl 0.9.3Openssl Openssl 0.9.5aOpenssl Openssl 0.9.6Openssl Openssl 0.9.6gOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.7Openssl Openssl 0.9.7mOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.3aOpenssl Openssl 0.9.4Openssl Openssl 0.9.6aOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.5
NA
CVE-2012-0027
The GOST ENGINE in OpenSSL prior to 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote malicious users to cause a denial of service (daemon crash) via crafted data from a TLS client.
Openssl Openssl 1.0.0Openssl Openssl 0.9.8nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl Openssl 0.9.8sOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7Openssl Openssl 0.9.6mOpenssl Openssl 0.9.6gOpenssl Openssl 0.9.6fOpenssl Openssl 0.9.5Openssl Openssl 0.9.4Openssl Openssl 1.0.0aOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8f
NA
CVE-2011-4108
The DTLS implementation in OpenSSL prior to 0.9.8s and 1.x prior to 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote malicious users to recover plaintext via a padding oracle attack.
Openssl Openssl 0.9.8oOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.7kOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6bOpenssl OpensslOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8cOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7Openssl Openssl 0.9.6mOpenssl Openssl 0.9.6g
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook