OpenSSL Project OpenSSL 1.0.0q
Approved changes feed: RSS · Atom
cpe:2.3:a:openssl:openssl:1.0.0q:*:*:*:*:*:*:*
part: a version: 1.0.0q update: *
| Vendor | Openssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02) |
|---|---|
| Product | Openssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openssl |
purl2cpe | 2026-06-01 10:18:22.970022 |
pkg:deb/ubuntu/openssl |
purl2cpe | 2026-06-01 10:18:22.970024 |
pkg:github/openssl/openssl |
purl2cpe | 2026-06-01 10:18:22.970025 |
pkg:rpm/centos/openssl |
purl2cpe | 2026-06-01 10:18:22.970027 |
pkg:rpm/fedora/openssl |
purl2cpe | 2026-06-01 10:18:22.970028 |
pkg:rpm/opensuse/openssl |
purl2cpe | 2026-06-01 10:18:22.970030 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3735 |
vulnerable | 2026-06-08 05:09:36.136197 |
Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0704 |
vulnerable | 2026-06-08 05:07:15.753473 |
Details available
An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.525Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0703 |
vulnerable | 2026-06-08 05:07:15.751736 |
Details available
The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.398Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3196 |
vulnerable | 2026-06-08 05:06:37.534106 |
Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1792 |
vulnerable | 2026-06-08 05:06:26.271719 |
Details available
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Published: 2015-06-12T00:00:00.000Z
Updated: 2024-08-06T04:54:16.038Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1791 |
vulnerable | 2026-06-08 05:06:26.270031 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1790 |
vulnerable | 2026-06-08 05:06:26.268173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1789 |
vulnerable | 2026-06-08 05:06:26.254302 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1788 |
vulnerable | 2026-06-08 05:06:26.242524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0293 |
vulnerable | 2026-06-08 05:06:14.219497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0289 |
vulnerable | 2026-06-08 05:06:14.215912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0288 |
vulnerable | 2026-06-08 05:06:14.214525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0287 |
vulnerable | 2026-06-08 05:06:14.213172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0286 |
vulnerable | 2026-06-08 05:06:14.211726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0209 |
vulnerable | 2026-06-08 05:06:13.926878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.