openssl vulnerabilities

Known vulnerabilities in the openssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Missing Report of Error Condition	[3.2.0,3.2.4)[3.3.1,3.3.2)[3.4.0,3.4.1)
M Covert Timing Channel	[,3.0.16)
M Out-of-bounds Write	[1.0.2u,1.1.0l)[1.1.1q,3.0.16)[3.1.0,3.1.8)[3.2.0,3.2.4)[3.3.1,3.3.3)
H Type Confusion	[3.0.5,3.0.15)[3.1.0,3.1.7)[3.2.0,3.2.3)[3.3.1,3.3.2)
H Information Exposure	[3.0.5,3.0.15)[3.1.0,3.1.7)[3.2.0,3.2.3)[3.3.1,3.3.2)
M Use After Free	[1.1.1q,3.0.14)[3.1.0,3.1.6)[3.2.0,3.2.2)
L Uncontrolled Resource Consumption	[3.0.5,3.0.14)[3.1.0,3.1.6)[3.2.0,3.2.2)
L Uncontrolled Resource Consumption ('Resource Exhaustion')	[3.0.5,3.0.14)[3.1.0,3.1.6)[3.2.0,3.2.2)
M Observable Timing Discrepancy	[,3.2.0)
M NULL Pointer Dereference	[1.0.2u,1.1.0l)[1.1.1q,3.0.13)[3.1.0,3.1.5)[3.2.0,3.2.1)
M Resource Exhaustion	[3.0.5,3.0.13)[3.1.0,3.1.5)[3.2.0,3.2.1)
M Use of a Broken or Risky Cryptographic Algorithm	[3.0.5,3.0.13)[3.1.0,3.1.5)[3.2.0,3.2.1)
M Denial of Service (DoS)	[,3.2.0)
M Missing Cryptographic Step	[3.0.5,3.0.12)[3.1.0,3.1.4)
M Denial of Service (DoS)	[1.1.1q,1.1.1w)[3.0.5,3.0.11)[3.1.0,3.1.3)
L Denial of Service (DoS)	[1.0.2u,1.1.1v)[3.0.9,3.0.10)[3.1.0,3.1.2)
M Denial of Service (DoS)	[1.0.2u,1.1.1v)[3.0.9,3.0.10)[3.1.0,3.1.2)
L Insufficient Verification of Data Authenticity	[3.0.9,3.0.10)[3.1.0,3.1.2)
M Denial of Service (DoS)	[1.0.2u,1.1.0l)[1.1.1q,1.1.1u)[3.0.5,3.0.9)[3.1.0,3.1.1)
M Buffer Over-read	[3.0.5,3.0.9)[3.1.0,3.1.1)
L Improper Certificate Validation	[1.1.0l,1.1.1u)[3.0.5,3.0.9)[3.1.0,3.1.1)
L Improper Certificate Validation	[1.1.0l,1.1.1u)[3.0.5,3.0.9)[3.1.0,3.1.1)
M Denial of Service (DoS)	[1.0.2u,1.1.1u)[3.0.5,3.0.9)[3.1.0,3.1.1)
H Denial of Service (DoS)	[3.0.5,3.0.8)
M Denial of Service (DoS)	[3.0.5,3.0.8)
M Denial of Service (DoS)	[3.0.5,3.0.8)
M Denial of Service (DoS)	[1.1.1q,1.1.1t)[3.0.5,3.0.8)
M Denial of Service (DoS)	[3.0.5,3.0.8)
M Timing Attack	[1.0.2u,1.1.0l)[1.1.1q,1.1.1t)[3.0.5,3.0.8)
H Access of Resource Using Incompatible Type ('Type Confusion')	[1.0.2u,1.1.0l)[1.1.1q,1.1.1t)[3.0.5,3.0.8)
M Use After Free	[1.0.2u,1.1.0l)[1.1.1q,1.1.1t)[3.0.5,3.0.8)
M Denial of Service (DoS)	[3.0.5,3.0.8)
H Buffer Overflow	[3.0.5,3.0.7)
H Buffer Overflow	[3.0.5,3.0.7)
M Cryptographic Issues	[3.0.5,3.0.7)
H Arbitrary Command Injection	[1.0.2u,1.1.0l)
H Infinite loop	[1.0.2u,1.1.0l)
M Denial of Service (DoS)	[0,)
H Denial of Service (DoS)	[1.1.0l,1.1.1q)
C Use After Free	[1.0.2u,1.1.0l)
M Integer Overflow or Wraparound	[1.0.2u,1.1.1q)
M Denial of Service (DoS)	[0,)
M Denial of Service (DoS)	[0,)
M CVE-2004-0975	[0,)
H Information Exposure	[0,)
M Improper Input Validation	[0,)
M Resource Management Errors	[0,)
H Out-of-bounds Read	[1.0.2u,1.1.1q)
H Improper Input Validation	[1.0.2u,1.1.0l)
H Use of a Risky Cryptographic Algorithm	[,1.1.0l)
M Resource Management Errors	[0,)
M Denial of Service (DoS)	[0,)
M Denial of Service (DoS)	[0,)
C Out-of-Bounds	[0,)
M Integer Overflow or Wraparound	[,1.1.0l)
M Resource Management Errors	[0,)
M Denial of Service (DoS)	[0,)
M User Enumeration	[,1.1.1q)
M Resource Management Errors	[0,)
H Improper Access Control	[1.0.2u,1.1.0l)
M NULL Pointer Dereference	[1.0.2u,1.1.1q)
M Denial of Service (DoS)	[0,)
H NULL Pointer Dereference	[1.0.2u,1.1.0l)
M Timing Attack	[0,)
H Denial of Service (DoS)	[0,)
L Cryptographic Issues	[0,)
H Race Condition	[0,)
L User Enumeration	[1.0.2u,1.1.0l)
M Cryptographic Issues	[0,)
M Cryptographic Issues	[0,)
M Resource Management Errors	[1.0.2u,1.1.0l)
C Buffer Overflow	[1.1.0l,1.1.1q)
M Cryptographic Issues	[,1.1.0l)
H Information Exposure	[0,)
M Improper Authentication	[0,)
H NULL Pointer Dereference	[1.0.2u,1.1.0l)
L Insecure Encryption	[1.0.2u,1.1.1q)
M Denial of Service (DoS)	[0,)
M Denial of Service (DoS)	[0,)
M Denial of Service (DoS)	[0,)
H Improper Input Validation	[1.0.2u,1.1.0l)
M NULL Pointer Dereference	[1.1.0l,1.1.1q)
M Denial of Service (DoS)	[1.0.2u,1.1.0l)
H Improper Authentication	[0,)
H Integer Overflow or Wraparound	[,1.1.0l)
M Insecure Defaults	[1.0.2u,1.1.0l)
M CVE-2000-0535	[0,)
L Improper Authentication	[0,)
M Resource Management Errors	[0,)
M CVE-2003-0147	[0,)

Vulnerability

Vulnerable Version

Missing Report of Error Condition

[3.2.0,3.2.4)[3.3.1,3.3.2)[3.4.0,3.4.1)

Covert Timing Channel

[,3.0.16)

Out-of-bounds Write