Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0l:*:*:*:*:*:*:*

part: a version: 1.0.0l update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:22.969980
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:22.969981
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:22.969982
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:22.969984
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:22.969985
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:22.969987

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3735 vulnerable 2026-06-08 05:09:36.132861 Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0704 vulnerable 2026-06-08 05:07:15.753386 Details available
An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0703 vulnerable 2026-06-08 05:07:15.749085 Details available
The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3196 vulnerable 2026-06-08 05:06:37.531533 Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1792 vulnerable 2026-06-08 05:06:26.271638 Details available
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Published: 2015-06-12T00:00:00.000Z
Updated: 2024-08-06T04:54:16.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1791 vulnerable 2026-06-08 05:06:26.269950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1790 vulnerable 2026-06-08 05:06:26.268083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1789 vulnerable 2026-06-08 05:06:26.254212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1788 vulnerable 2026-06-08 05:06:26.239837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0293 vulnerable 2026-06-08 05:06:14.219419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0292 vulnerable 2026-06-08 05:06:14.218023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0289 vulnerable 2026-06-08 05:06:14.215835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0288 vulnerable 2026-06-08 05:06:14.214445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0287 vulnerable 2026-06-08 05:06:14.213085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0286 vulnerable 2026-06-08 05:06:14.211643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0209 vulnerable 2026-06-08 05:06:13.923603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0206 vulnerable 2026-06-08 05:06:13.910787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0205 vulnerable 2026-06-08 05:06:13.909625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0204 vulnerable 2026-06-08 05:06:13.908077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8275 vulnerable 2026-06-08 05:06:08.330279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8176 vulnerable 2026-06-08 05:06:08.268203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3572 vulnerable 2026-06-08 05:05:33.547544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3571 vulnerable 2026-06-08 05:05:33.546323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3570 vulnerable 2026-06-08 05:05:33.542936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3568 vulnerable 2026-06-08 05:05:33.534174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3567 vulnerable 2026-06-08 05:05:33.532658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3566 vulnerable 2026-06-08 05:05:33.506255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3512 vulnerable 2026-06-08 05:05:33.159492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3511 vulnerable 2026-06-08 05:05:33.158070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3510 vulnerable 2026-06-08 05:05:33.156406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3509 vulnerable 2026-06-08 05:05:33.154157 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3508 vulnerable 2026-06-08 05:05:33.152400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3507 vulnerable 2026-06-08 05:05:33.149810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3506 vulnerable 2026-06-08 05:05:33.147378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3505 vulnerable 2026-06-08 05:05:33.138066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.