Approved changes feed: RSS · Atom

cpe:2.3:a:openssl:openssl:1.0.0n:*:*:*:*:*:*:*

part: a version: 1.0.0n update: *

VendorOpenssl (1e7bcbe3-aabe-50a4-8853-ff7f6ce8bd02)
ProductOpenssl (3ac33f6d-3ea6-5807-a2fa-788d3707f5b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/openssl purl2cpe 2026-06-01 10:18:22.969997
pkg:deb/ubuntu/openssl purl2cpe 2026-06-01 10:18:22.969998
pkg:github/openssl/openssl purl2cpe 2026-06-01 10:18:22.969999
pkg:rpm/centos/openssl purl2cpe 2026-06-01 10:18:22.970001
pkg:rpm/fedora/openssl purl2cpe 2026-06-01 10:18:22.970002
pkg:rpm/opensuse/openssl purl2cpe 2026-06-01 10:18:22.970004

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3735 vulnerable 2026-06-08 05:09:36.134376 Details available
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.
Published: 2017-08-28T19:00:00.000Z
Updated: 2024-09-16T21:08:28.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0704 vulnerable 2026-06-08 05:07:15.753422 Details available
An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0703 vulnerable 2026-06-08 05:07:15.750142 Details available
The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.
Published: 2016-03-02T00:00:00.000Z
Updated: 2024-08-05T22:30:03.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3196 vulnerable 2026-06-08 05:06:37.532582 Details available
ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.
Published: 2015-12-06T00:00:00.000Z
Updated: 2024-08-06T05:39:31.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1792 vulnerable 2026-06-08 05:06:26.271670 Details available
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.
Published: 2015-06-12T00:00:00.000Z
Updated: 2024-08-06T04:54:16.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1791 vulnerable 2026-06-08 05:06:26.269983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1790 vulnerable 2026-06-08 05:06:26.268120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1789 vulnerable 2026-06-08 05:06:26.254248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1788 vulnerable 2026-06-08 05:06:26.240936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0293 vulnerable 2026-06-08 05:06:14.219451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0289 vulnerable 2026-06-08 05:06:14.215867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0288 vulnerable 2026-06-08 05:06:14.214476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0287 vulnerable 2026-06-08 05:06:14.213116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0286 vulnerable 2026-06-08 05:06:14.211676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0209 vulnerable 2026-06-08 05:06:13.923637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0206 vulnerable 2026-06-08 05:06:13.910820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0205 vulnerable 2026-06-08 05:06:13.909657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0204 vulnerable 2026-06-08 05:06:13.908199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8275 vulnerable 2026-06-08 05:06:08.333253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3572 vulnerable 2026-06-08 05:05:33.547575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3571 vulnerable 2026-06-08 05:05:33.546356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3570 vulnerable 2026-06-08 05:05:33.542969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3568 vulnerable 2026-06-08 05:05:33.534205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3567 vulnerable 2026-06-08 05:05:33.532692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3566 vulnerable 2026-06-08 05:05:33.508655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.