Advisories · Technology
OpenBSD LibreSSL.
Every CVE that names OpenBSD LibreSSL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response
- OpenBSD LibreSSL
- Denial of service
- CVSS 6.3 Medium
LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()
- OpenBSD LibreSSL
- Weak cryptography or TLS
- CVSS 6.3 Medium
LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path
- OpenBSD LibreSSL
- Other injection
- CVSS 6.3 Medium
LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line
- OpenBSD LibreSSL
- Other injection