Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0g:*:*:*:*:*:*:*

part: a version: 1.0.0g update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:22.969938
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:22.969939
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:22.969940
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:22.969942
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:22.969943
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:22.969945

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3735 vulnerable 2026-06-08 05:09:36.129008 Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0704 vulnerable 2026-06-08 05:07:15.753293 Details available
An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0703 vulnerable 2026-06-08 05:07:15.746512 Details available
The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3196 vulnerable 2026-06-08 05:06:37.528950 Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1792 vulnerable 2026-06-08 05:06:26.271559 Details available
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Published: 2015-06-12T00:00:00.000Z
Updated: 2024-08-06T04:54:16.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1791 vulnerable 2026-06-08 05:06:26.269868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1790 vulnerable 2026-06-08 05:06:26.267912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1789 vulnerable 2026-06-08 05:06:26.254124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1788 vulnerable 2026-06-08 05:06:26.236992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0293 vulnerable 2026-06-08 05:06:14.219340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0292 vulnerable 2026-06-08 05:06:14.217942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0289 vulnerable 2026-06-08 05:06:14.215749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0288 vulnerable 2026-06-08 05:06:14.214366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0287 vulnerable 2026-06-08 05:06:14.213007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0286 vulnerable 2026-06-08 05:06:14.211560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0209 vulnerable 2026-06-08 05:06:13.923517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0206 vulnerable 2026-06-08 05:06:13.910708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0205 vulnerable 2026-06-08 05:06:13.909542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0204 vulnerable 2026-06-08 05:06:13.907986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8275 vulnerable 2026-06-08 05:06:08.330190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8176 vulnerable 2026-06-08 05:06:08.265412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3572 vulnerable 2026-06-08 05:05:33.547465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3571 vulnerable 2026-06-08 05:05:33.546240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3570 vulnerable 2026-06-08 05:05:33.542854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3568 vulnerable 2026-06-08 05:05:33.534093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3567 vulnerable 2026-06-08 05:05:33.532575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3566 vulnerable 2026-06-08 05:05:33.506168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3512 vulnerable 2026-06-08 05:05:33.159413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3511 vulnerable 2026-06-08 05:05:33.157990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3510 vulnerable 2026-06-08 05:05:33.156316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3509 vulnerable 2026-06-08 05:05:33.154070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3508 vulnerable 2026-06-08 05:05:33.152323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3507 vulnerable 2026-06-08 05:05:33.149732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3506 vulnerable 2026-06-08 05:05:33.147297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3505 vulnerable 2026-06-08 05:05:33.135472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0076 vulnerable 2026-06-08 05:05:11.248790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6450 vulnerable 2026-06-08 05:04:56.915433 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6449 vulnerable 2026-06-08 05:04:56.908942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0166 vulnerable 2026-06-08 05:03:02.243236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2333 vulnerable 2026-06-08 05:02:03.690951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2110 vulnerable 2026-06-08 05:00:52.854198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1165 vulnerable 2026-06-08 05:00:47.925806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0884 vulnerable 2026-06-08 05:00:46.236458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.