Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0s:*:*:*:*:*:*:*

part: a version: 1.0.0s update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:22.970040
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:22.970041
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:22.970043
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:22.970044
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:22.970045
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:22.970047

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3735 vulnerable 2026-06-08 05:09:36.137298 Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3196 vulnerable 2026-06-08 05:06:37.535053 Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.