openssl | Snyk

Direct Vulnerabilities

Known vulnerabilities in the openssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Arbitrary Code Execution	>=1.0.2, <1.0.2zf>=1.1.1, <1.1.1p>=3.0.0, <3.0.4
H Buffer Overflow	>=0.0.0
M Buffer Overflow	>=0.0.0
H Missing Release of Resource after Effective Lifetime	>=1.0.1, <1.0.109>=1.0.204.1, <1.0.211
L Improper Certificate Validation	>=1.0.0
H Improper Input Validation	>=1.0.200, <1.0.209>=1.0.204.1, <1.0.209
M Resource Management Errors	>=1.0.0, <1.0.202
M Resource Management Errors	>=1.0.0, <1.0.108
M Denial of Service (DoS)	>=1.0.0, <1.0.108
M Improper Input Validation	>=1.0.0, <1.0.110
H Out-of-Bounds	>=1.0.0, <1.0.108
M Denial of Service (DoS)	>=1.0.0, <1.0.201
H Out-of-Bounds	>=1.0.1, <1.0.109
C Out-of-bounds Write	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.209
M Resource Management Errors	>=1.0.0
C Out-of-Bounds	>=1.0.200, <1.0.207
H Out-of-Bounds	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.208
L Information Exposure	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.206
C Denial of Service (DoS)	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.207
M Key Management Errors	>=1.0.200, <1.0.211
M Information Exposure	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.207
M Improper Input Validation	>=1.0.1, <1.0.200
M Information Exposure	>=1.0.200, <1.0.205
M Code	>=1.0.0, <1.0.201
M Cryptographic Issues	>=1.0.0, <1.0.111
M Resource Management Errors	>=1.0.0, <1.0.109
M Regular Expression Denial of Service (ReDoS)	>=1.0.202, <1.0.211
M Denial of Service (DoS)	>=1.0.0, <1.0.111
M Race Condition	>=1.0.1, <1.0.108
M Information Exposure	>=1.0.200, <1.0.205
M Cryptographic Issues	>=1.0.0, <1.0.108
M Code	>=1.0.200
M Cryptographic Issues	>=1.0.1
M Cryptographic Issues	>=1.0.0, <1.0.111
M Resource Management Errors	>=1.0.0
M Code	>=1.0.0, <1.0.201
H Resource Exhaustion	>=1.0.200, <1.0.209>=1.0.204.1, <1.0.209
H Denial of Service (DoS)	>=1.0.1, <1.0.2>=1.0.204.1, <1.0.207
L Cryptographic Issues	>=1.0.0
H Resource Management Errors	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.208
M Denial of Service (DoS)	>=1.0.0, <1.0.201
M Information Exposure	>=1.0.200, <1.0.211
H Numeric Errors	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.208
H Key Management Errors	>=1.0.200, <1.0.211>=1.0.204.1, <1.0.205
M Race Condition	>=1.0.0, <1.0.109
L Improper Input Validation	>=1.0.200
M Information Exposure	<1.0.109>=1.0.2, <1.0.2.110
M Denial of Service (DoS)	>=1.0.200
M Cryptographic Issues	>=1.0.0, <1.0.110
M Numeric Errors	>=1.0.0, <1.0.1
M Man-in-the-Middle (MitM)	>=1.0.1, <1.0.109
H Numeric Errors	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.209
M Information Exposure	>=1.0.0, <1.0.109
M Information Exposure	>=1.0.1, <1.0.200
H Out-of-bounds Read	>=1.0.2, <1.0.209
H Out-of-bounds Read	>=1.0.0, <1.0.211>=1.0.204.1, <1.0.210
M Resource Management Errors	>=1.0.1, <1.0.200
H Resource Management Errors	>=1.0.200, <1.0.209
H Resource Management Errors	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.207
C Integer Overflow or Wraparound	>=0.0.0
C Out-of-bounds Write	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.209
M Race Condition	>=1.0.200, <1.0.202
M Denial of Service (DoS)	>=1.0.0, <1.0.201
M Cryptographic Issues	>=1.0.200, <1.0.207
M Information Exposure	>=1.0.1, <1.0.201
M Information Exposure	>=1.0.200, <1.0.211
M Information Exposure	>=1.0.0, <1.0.211
M Out-of-Bounds	>=1.0.0, <1.0.108
M Denial of Service (DoS)	>=1.0.1, <1.0.109
M Cryptographic Issues	>=1.0.0, <1.0.111
M Key Management Errors	>=1.0.200, <1.0.211
L Cryptographic Issues	>=1.0.0
M Cryptographic Issues	>=1.0.200, <1.0.208
M Denial of Service (DoS)	>=1.0.0, <1.0.109
M Cryptographic Issues	>=1.0.0
M Out-of-Bounds	>=1.0.0, <1.0.111
H Out-of-Bounds	>=1.0.0, <1.0.8
M Cryptographic Issues	>=1.0.0, <1.0.200
H Out-of-Bounds	>=1.0.0, <1.0.108
M Security Features	>=1.0.202, <1.0.204
M Improper Input Validation	>=1.0.1, <1.0.110
M Cryptographic Issues	>=1.0.0
M Out-of-Bounds	>=1.0.200, <1.0.211>=1.0.204.1, <1.0.205
M Improper Input Validation	>=1.0.1
M Information Exposure	>=1.0.200, <1.0.211
M Cryptographic Issues	>=1.0.0, <1.0.110
M Cryptographic Issues	>=1.0.200, <1.0.206
C Out-of-Bounds	>=1.0.200, <1.0.207>=1.0.204.1, <1.0.207
M Out-of-Bounds	>=1.0.0
M Cryptographic Issues	>=1.0.0, <1.0.108
M Denial of Service (DoS)	>=1.0.0, <1.0.109
M Denial of Service (DoS)	>=1.0.110
M Information Exposure	>=1.0.1, <1.0.200>=1.0.204.1, <1.0.210
C Out-of-Bounds	>=1.0.1, <1.0.200

Vulnerability

Vulnerable Version

Arbitrary Code Execution

>=1.0.2, <1.0.2zf>=1.1.1, <1.1.1p>=3.0.0, <3.0.4