Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openssl openssl 1.0.0e vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-3510
The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 prior to 0.9.8zb, 1.0.0 prior to 1.0.0n, and 1.0.1 prior to 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake mess...
Openssl Openssl 0.9.8bOpenssl Openssl 0.9.8mOpenssl Openssl 1.0.1Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8uOpenssl Openssl 0.9.8zaOpenssl Openssl 1.0.1gOpenssl Openssl 0.9.8gOpenssl Openssl 1.0.0hOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0f
NA
CVE-2014-3511
The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 prior to 1.0.1i allows man-in-the-middle malicious users to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS version...
Openssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1fOpenssl Openssl 1.0.0lOpenssl Openssl 1.0.0aOpenssl Openssl 1.0.0b
NA
CVE-2014-3512
Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 prior to 1.0.1i allow remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter...
Openssl Openssl 1.0.1Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0Openssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1fOpenssl Openssl 1.0.0lOpenssl Openssl 1.0.0aOpenssl Openssl 1.0.0b
NA
CVE-2014-0076
The Montgomery ladder implementation in OpenSSL up to and including 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 0.9.7cOpenssl Openssl 1.0.0Openssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8u
NA
CVE-2013-0166
OpenSSL prior to 0.9.8y, 1.0.0 prior to 1.0.0k, and 1.0.1 prior to 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
Openssl Openssl 0.9.7Openssl Openssl 0.9.5aOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.8mOpenssl Openssl 0.9.3Openssl Openssl 0.9.8cOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.5Openssl Openssl 0.9.8nOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.6dOpenssl Openssl 0.9.1cOpenssl Openssl 0.9.6Openssl Openssl 1.0.1cOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.8eOpenssl Openssl 0.9.8u
NA
CVE-2012-2333
Integer underflow in OpenSSL prior to 0.9.8x, 1.0.0 prior to 1.0.0j, and 1.0.1 prior to 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via ...
Openssl Openssl 0.9.8mOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8hOpenssl OpensslOpenssl Openssl 0.9.8vOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7gOpenssl Openssl 0.9.7jOpenssl Openssl 0.9.6Openssl Openssl 0.9.6bOpenssl Openssl 0.9.6eRedhat Openssl 0.9.6-15Openssl Openssl 0.9.8uOpenssl Openssl 0.9.8tOpenssl Openssl 0.9.8s
NA
CVE-2012-2110
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL prior to 0.9.8v, 1.0.0 prior to 1.0.0i, and 1.0.1 prior to 1.0.1a does not properly interpret integer data, which allows remote malicious users to conduct buffer overflow attacks, and cause a denial of service (m...
Openssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl OpensslOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7dOpenssl Openssl 0.9.7eOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6m
NA
CVE-2012-1165
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL prior to 0.9.8u and 1.x prior to 1.0.0h allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-20...
Openssl Openssl 0.9.8pOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8rOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8kOpenssl Openssl 0.9.8jOpenssl Openssl 0.9.8bOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.7Openssl Openssl 0.9.7aOpenssl Openssl 0.9.7hOpenssl Openssl 0.9.7iOpenssl Openssl 0.9.6aOpenssl Openssl 0.9.6iOpenssl Openssl 0.9.6hOpenssl Openssl 0.9.6mOpenssl Openssl 0.9.6lOpenssl Openssl 0.9.5Openssl Openssl 0.9.3aOpenssl Openssl 0.9.3Openssl Openssl
NA
CVE-2012-0884
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL prior to 0.9.8u and 1.x prior to 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent malicious users to decrypt data via a Million Message Attack (MM...
Openssl Openssl 1.0.0cOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0aOpenssl Openssl 0.9.8oOpenssl Openssl 0.9.8nOpenssl Openssl 0.9.8gOpenssl Openssl 0.9.8fOpenssl Openssl 0.9.7lOpenssl Openssl 0.9.7mOpenssl Openssl 0.9.7dOpenssl Openssl 0.9.7cOpenssl Openssl 0.9.6kOpenssl Openssl 0.9.6jOpenssl Openssl 0.9.6Openssl Openssl 1.0.0eOpenssl Openssl 1.0.0dOpenssl Openssl 0.9.8qOpenssl Openssl 0.9.8pOpenssl Openssl 0.9.8iOpenssl Openssl 0.9.8hOpenssl Openssl 0.9.8aOpenssl Openssl 0.9.8
NA
CVE-2011-3207
crypto/x509/x509_vfy.c in OpenSSL 1.0.x prior to 1.0.0e does not initialize certain structure members, which makes it easier for remote malicious users to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.
Openssl Openssl 1.0.0Openssl Openssl 1.0.0bOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0aOpenssl Openssl 1.0.0c
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook