Openssl
Page 4 of 4 — Openssl CVEs from a corpus of 302, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2003-0131 | | 2003-03-24 | The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a… | |
CVE-2003-0078 | | 2003-03-03 | ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used… | |
CVE-2002-0659 | | 2002-08-12 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings. | |
CVE-2002-0657 | | 2002-08-12 | Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key. | |
CVE-2002-0656 | | 2002-08-12 | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key… | |
CVE-2002-0655 | | 2002-08-12 | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow atta… | |
CVE-2001-1141 | | 2001-07-10 | The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the intern… | |
CVE-2000-0535 | | 2000-06-12 | OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha sys… | |
CVE-1999-0428 | | 1999-03-22 | OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls. |