GCVE - cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0r:*:*:*:*:*:*:*

part: a version: 1.0.0r update: *

Vendor	Openssl (`1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02`)
Product	Openssl (`3ac33f6d-3ea6-5807-a2fa-788d3707f5b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/openssl`	purl2cpe	2026-06-01 10:18:22.970031
`pkg:deb/ubuntu/openssl`	purl2cpe	2026-06-01 10:18:22.970033
`pkg:github/openssl/openssl`	purl2cpe	2026-06-01 10:18:22.970034
`pkg:rpm/centos/openssl`	purl2cpe	2026-06-01 10:18:22.970035
`pkg:rpm/fedora/openssl`	purl2cpe	2026-06-01 10:18:22.970037
`pkg:rpm/opensuse/openssl`	purl2cpe	2026-06-01 10:18:22.970038

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-3735`	vulnerable	2026-06-08 05:09:36.136707	Details available While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g. Published: 2017-08-28T19:00:00.000Z Updated: 2024-09-16T21:08:28.987Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039726 https://usn.ubuntu.com/3611-2/ https://www.debian.org/security/2017/dsa-4018 https://security.gentoo.org/glsa/201712-03 https://lists.debian.org/debian-lts-announce/2017/11/msg00011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3196`	vulnerable	2026-06-08 05:06:37.534584	Details available ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message. Published: 2015-12-06T00:00:00.000Z Updated: 2024-08-06T05:39:31.984Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151204-openssl https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04944173 http://lists.opensuse.org/opensuse-updates/2015-12/msg00070.html https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=3c66a669dfc7b3792f7af0758ea26fe8502ce70c http://rhn.redhat.com/errata/RHSA-2015-2617.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1792`	vulnerable	2026-06-08 05:06:26.271734	Details available The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function. Published: 2015-06-12T00:00:00.000Z Updated: 2024-08-06T04:54:16.038Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html http://marc.info/?l=bugtraq&m=143880121627664&w=2 http://www.debian.org/security/2015/dsa-3287 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html https://kc.mcafee.com/corporate/index?page=content&id=SB10122	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1791`	vulnerable	2026-06-08 05:06:26.270047	Details available Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier. Published: 2015-06-12T00:00:00.000Z Updated: 2024-08-06T04:54:16.425Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html http://marc.info/?l=bugtraq&m=143880121627664&w=2 http://www.debian.org/security/2015/dsa-3287 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html https://kc.mcafee.com/corporate/index?page=content&id=SB10122	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1790`	vulnerable	2026-06-08 05:06:26.268189	Details available The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data. Published: 2015-06-12T00:00:00.000Z Updated: 2024-08-06T04:54:15.966Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html http://marc.info/?l=bugtraq&m=143880121627664&w=2 http://www.debian.org/security/2015/dsa-3287 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html https://kc.mcafee.com/corporate/index?page=content&id=SB10122	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1789`	vulnerable	2026-06-08 05:06:26.254319	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1788`	vulnerable	2026-06-08 05:06:26.243069	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.