Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0h:*:*:*:*:*:*:*

part: a version: 1.0.0h update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:22.969946
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:22.969947
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:22.969949
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:22.969950
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:22.969951
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:22.969953

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3735 vulnerable 2026-06-08 05:09:36.129777 Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0704 vulnerable 2026-06-08 05:07:15.753311 Details available
An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0703 vulnerable 2026-06-08 05:07:15.747023 Details available
The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3196 vulnerable 2026-06-08 05:06:37.529490 Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1792 vulnerable 2026-06-08 05:06:26.271574 Details available
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Published: 2015-06-12T00:00:00.000Z
Updated: 2024-08-06T04:54:16.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1791 vulnerable 2026-06-08 05:06:26.269886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1790 vulnerable 2026-06-08 05:06:26.267928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1789 vulnerable 2026-06-08 05:06:26.254140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1788 vulnerable 2026-06-08 05:06:26.237658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0293 vulnerable 2026-06-08 05:06:14.219356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0292 vulnerable 2026-06-08 05:06:14.217958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0289 vulnerable 2026-06-08 05:06:14.215766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0288 vulnerable 2026-06-08 05:06:14.214382 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0287 vulnerable 2026-06-08 05:06:14.213022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0286 vulnerable 2026-06-08 05:06:14.211576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0209 vulnerable 2026-06-08 05:06:13.923533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0206 vulnerable 2026-06-08 05:06:13.910725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0205 vulnerable 2026-06-08 05:06:13.909559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0204 vulnerable 2026-06-08 05:06:13.908005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8275 vulnerable 2026-06-08 05:06:08.330209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8176 vulnerable 2026-06-08 05:06:08.265965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3572 vulnerable 2026-06-08 05:05:33.547481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3571 vulnerable 2026-06-08 05:05:33.546258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3570 vulnerable 2026-06-08 05:05:33.542870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3568 vulnerable 2026-06-08 05:05:33.534109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3567 vulnerable 2026-06-08 05:05:33.532592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3566 vulnerable 2026-06-08 05:05:33.506185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3512 vulnerable 2026-06-08 05:05:33.159428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3511 vulnerable 2026-06-08 05:05:33.158006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3510 vulnerable 2026-06-08 05:05:33.156337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3509 vulnerable 2026-06-08 05:05:33.154087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3508 vulnerable 2026-06-08 05:05:33.152338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3507 vulnerable 2026-06-08 05:05:33.149747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3506 vulnerable 2026-06-08 05:05:33.147313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3505 vulnerable 2026-06-08 05:05:33.136012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0076 vulnerable 2026-06-08 05:05:11.249323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6450 vulnerable 2026-06-08 05:04:56.915451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6449 vulnerable 2026-06-08 05:04:56.909511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0166 vulnerable 2026-06-08 05:03:02.243756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2333 vulnerable 2026-06-08 05:02:03.691695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.