OpenSSL 1.0.1q
Approved changes feed: RSS · Atom
cpe:2.3:a:openssl:openssl:1.0.1q:*:*:*:*:*:*:*
part: a version: 1.0.1q update: *
| Vendor | Openssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02) |
|---|---|
| Product | Openssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/openssl |
purl2cpe | 2026-06-01 10:18:23.003378 |
pkg:deb/ubuntu/openssl |
purl2cpe | 2026-06-01 10:18:23.003379 |
pkg:github/openssl/openssl |
purl2cpe | 2026-06-01 10:18:23.003380 |
pkg:rpm/centos/openssl |
purl2cpe | 2026-06-01 10:18:23.003382 |
pkg:rpm/fedora/openssl |
purl2cpe | 2026-06-01 10:18:23.003383 |
pkg:rpm/opensuse/openssl |
purl2cpe | 2026-06-01 10:18:23.003384 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-6306 |
vulnerable | 2026-06-08 05:07:59.431933 |
Details available
The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c.
Published: 2016-09-26T00:00:00.000Z
Updated: 2024-08-06T01:29:18.287Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6304 |
vulnerable | 2026-06-08 05:07:59.427138 |
Details available
Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions.
Published: 2016-09-26T00:00:00.000Z
Updated: 2024-08-06T01:29:18.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6303 |
vulnerable | 2026-06-08 05:07:59.415626 |
Details available
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
Published: 2016-09-16T00:00:00.000Z
Updated: 2024-08-06T01:29:18.225Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6302 |
vulnerable | 2026-06-08 05:07:59.408136 |
Details available
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.
Published: 2016-09-16T00:00:00.000Z
Updated: 2024-08-06T01:29:18.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2842 |
vulnerable | 2026-06-08 05:07:43.268049 |
Details available
The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.
Published: 2016-03-03T20:00:00.000Z
Updated: 2024-08-05T23:32:21.333Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2183 |
vulnerable | 2026-06-08 05:07:33.551453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2182 |
vulnerable | 2026-06-08 05:07:33.539658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2181 |
vulnerable | 2026-06-08 05:07:33.525623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2180 |
vulnerable | 2026-06-08 05:07:33.524312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2179 |
vulnerable | 2026-06-08 05:07:33.523018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2178 |
vulnerable | 2026-06-08 05:07:33.521650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2177 |
vulnerable | 2026-06-08 05:07:33.512759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2105 |
vulnerable | 2026-06-08 05:07:32.983683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0800 |
vulnerable | 2026-06-08 05:07:16.333294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0799 |
vulnerable | 2026-06-08 05:07:16.323419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0798 |
vulnerable | 2026-06-08 05:07:16.321930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0797 |
vulnerable | 2026-06-08 05:07:16.315791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0705 |
vulnerable | 2026-06-08 05:07:15.755459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0702 |
vulnerable | 2026-06-08 05:07:15.732527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3197 |
vulnerable | 2026-06-08 05:06:37.548704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.