GCVE - cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.1s:*:*:*:*:*:*:*

part: a version: 1.0.1s update: *

Vendor	Openssl (`1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02`)
Product	Openssl (`3ac33f6d-3ea6-5807-a2fa-788d3707f5b1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/openssl`	purl2cpe	2026-06-01 10:18:23.003394
`pkg:deb/ubuntu/openssl`	purl2cpe	2026-06-01 10:18:23.003395
`pkg:github/openssl/openssl`	purl2cpe	2026-06-01 10:18:23.003397
`pkg:rpm/centos/openssl`	purl2cpe	2026-06-01 10:18:23.003398
`pkg:rpm/fedora/openssl`	purl2cpe	2026-06-01 10:18:23.003399
`pkg:rpm/opensuse/openssl`	purl2cpe	2026-06-01 10:18:23.003401

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6306`	vulnerable	2026-06-08 05:07:59.431967	Details available The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate operations, related to s3_clnt.c and s3_srvr.c. Published: 2016-09-26T00:00:00.000Z Updated: 2024-08-06T01:29:18.287Z Open on db.gcve.eu Reference links https://www.tenable.com/security/tns-2016-20 https://access.redhat.com/errata/RHSA-2018:2185 https://access.redhat.com/errata/RHSA-2018:2186 http://www.securityfocus.com/bid/93153 http://rhn.redhat.com/errata/RHSA-2016-1940.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6304`	vulnerable	2026-06-08 05:07:59.427177	Details available Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) via large OCSP Status Request extensions. Published: 2016-09-26T00:00:00.000Z Updated: 2024-08-06T01:29:18.286Z Open on db.gcve.eu Reference links https://www.openssl.org/news/secadv/20160922.txt https://www.tenable.com/security/tns-2016-20 http://www.splunk.com/view/SP-CAAAPUE http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html http://rhn.redhat.com/errata/RHSA-2017-1659.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6303`	vulnerable	2026-06-08 05:07:59.415658	Details available Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. Published: 2016-09-16T00:00:00.000Z Updated: 2024-08-06T01:29:18.225Z Open on db.gcve.eu Reference links https://www.tenable.com/security/tns-2016-20 http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312 http://www-01.ibm.com/support/docview.wss?uid=swg21995039 http://www.securitytracker.com/id/1036885	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6302`	vulnerable	2026-06-08 05:07:59.409215	Details available The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short. Published: 2016-09-16T00:00:00.000Z Updated: 2024-08-06T01:29:18.217Z Open on db.gcve.eu Reference links https://www.tenable.com/security/tns-2016-20 https://access.redhat.com/errata/RHSA-2018:2185 https://access.redhat.com/errata/RHSA-2018:2186 http://www.splunk.com/view/SP-CAAAPUE http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2182`	vulnerable	2026-06-08 05:07:33.539693	Details available The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors. Published: 2016-09-16T00:00:00.000Z Updated: 2024-08-05T23:17:50.604Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1036688 https://www.tenable.com/security/tns-2016-20 https://access.redhat.com/errata/RHSA-2018:2185 https://access.redhat.com/errata/RHSA-2018:2186 http://www.splunk.com/view/SP-CAAAPUE	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2181`	vulnerable	2026-06-08 05:07:33.525655	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2180`	vulnerable	2026-06-08 05:07:33.524346	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2179`	vulnerable	2026-06-08 05:07:33.523051	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2178`	vulnerable	2026-06-08 05:07:33.521684	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2177`	vulnerable	2026-06-08 05:07:33.512797	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-2105`	vulnerable	2026-06-08 05:07:32.984680	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.