# OpenSSL.

Every CVE that names OpenSSL among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [NULL dereference in SSL_CIPHER_find() function on unknown cipher ID](https://agentprime.io/advisories/CVE-2025-15468.md)
  `CVE-2025-15468` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Stack buffer overflow in CMS (Auth)EnvelopedData parsing](https://agentprime.io/advisories/CVE-2025-15467.md)
  `CVE-2025-15467` · CVE record: OpenSSL OpenSSL · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.75 · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Improper validation of PBMAC1 parameters in PKCS#12 MAC verification](https://agentprime.io/advisories/CVE-2025-11187.md)
  `CVE-2025-11187` · CVE record: OpenSSL OpenSSL · CVSS 6.1 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Out-of-bounds read in HTTP client no_proxy handling](https://agentprime.io/advisories/CVE-2025-9232.md)
  `CVE-2025-9232` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: Memory corruption
- [Timing side-channel in SM2 algorithm on 64 bit ARM](https://agentprime.io/advisories/CVE-2025-9231.md)
  `CVE-2025-9231` · CVE record: OpenSSL OpenSSL · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2025 · Tags: CWE-385
- [Out-of-bounds read & write in RFC 3211 KEK Unwrap](https://agentprime.io/advisories/CVE-2025-9230.md)
  `CVE-2025-9230` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 30 Sept 2025 · Tags: Memory corruption
- [The x509 application adds trusted use instead of rejected use](https://agentprime.io/advisories/CVE-2025-4575.md)
  `CVE-2025-4575` · CVE record: OpenSSL OpenSSL · CVSS 6.5 Medium · Not analysed yet · Published 22 May 2025 · Tags: Weak cryptography or TLS
- [Timing side-channel in ECDSA signature computation](https://agentprime.io/advisories/CVE-2024-13176.md)
  `CVE-2024-13176` · CVE record: OpenSSL OpenSSL · CVSS 4.1 Medium · Not analysed yet · Published 20 Jan 2025 · Tags: CWE-385
- [Use After Free with SSL_free_buffers](https://agentprime.io/advisories/CVE-2024-4741.md)
  `CVE-2024-4741` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 13 Nov 2024 · Tags: Memory corruption
- [Low-level invalid GF(2^m) parameters lead to OOB memory access](https://agentprime.io/advisories/CVE-2024-9143.md)
  `CVE-2024-9143` · CVE record: OpenSSL OpenSSL · CVSS 4.3 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: Memory corruption
- [Possible denial of service in X.509 name checks](https://agentprime.io/advisories/CVE-2024-6119.md)
  `CVE-2024-6119` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.67 · Not analysed yet · Published 3 Sept 2024 · Tags: Memory corruption
- [SSL_select_next_proto buffer overread](https://agentprime.io/advisories/CVE-2024-5535.md)
  `CVE-2024-5535` · CVE record: OpenSSL OpenSSL · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2024 · Tags: Memory corruption
- [Excessive time spent checking DSA keys and parameters](https://agentprime.io/advisories/CVE-2024-4603.md)
  `CVE-2024-4603` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 16 May 2024 · Tags: Denial of service, CWE-606
- [Excessive time spent checking invalid RSA public keys](https://agentprime.io/advisories/CVE-2023-6237.md)
  `CVE-2023-6237` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-606
- [Unbounded memory growth with session handling in TLSv1.3](https://agentprime.io/advisories/CVE-2024-2511.md)
  `CVE-2024-2511` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · EPSS 0.52 · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-1325
- [POLY1305 MAC implementation corrupts vector registers on PowerPC](https://agentprime.io/advisories/CVE-2023-6129.md)
  `CVE-2023-6129` · CVE record: OpenSSL OpenSSL · CVSS 6.5 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-440
- [Excessive time spent in DH check / generation with large Q parameter value](https://agentprime.io/advisories/CVE-2023-5678.md)
  `CVE-2023-5678` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 6 Nov 2023 · Tags: CWE-606
- [Incorrect cipher key & IV length processing](https://agentprime.io/advisories/CVE-2023-5363.md)
  `CVE-2023-5363` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 24 Oct 2023 · Tags: CWE-684
- [POLY1305 MAC implementation corrupts XMM registers on Windows](https://agentprime.io/advisories/CVE-2023-4807.md)
  `CVE-2023-4807` · CVE record: OpenSSL OpenSSL · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2023 · Tags: CWE-440
- [Excessive time spent checking DH q parameter value](https://agentprime.io/advisories/CVE-2023-3817.md)
  `CVE-2023-3817` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 31 Jul 2023 · Tags: CWE-606
- [Excessive time spent checking DH keys and parameters](https://agentprime.io/advisories/CVE-2023-3446.md)
  `CVE-2023-3446` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2023 · Tags: CWE-606
- [AES-SIV implementation ignores empty associated data entries](https://agentprime.io/advisories/CVE-2023-2975.md)
  `CVE-2023-2975` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-354
- [Possible DoS translating ASN.1 object identifiers](https://agentprime.io/advisories/CVE-2023-2650.md)
  `CVE-2023-2650` · CVE record: OpenSSL OpenSSL · CVSS 6.5 Medium · EPSS 0.75 · Not analysed yet · Published 30 May 2023 · Tags: Denial of service
- [Input buffer over-read in AES-XTS implementation on 64 bit ARM](https://agentprime.io/advisories/CVE-2023-1255.md)
  `CVE-2023-1255` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: Memory corruption
- [Certificate policy check not enabled](https://agentprime.io/advisories/CVE-2023-0466.md)
  `CVE-2023-0466` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2023
- [Invalid certificate policies in leaf certificates are silently ignored](https://agentprime.io/advisories/CVE-2023-0465.md)
  `CVE-2023-0465` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2023 · Tags: Weak cryptography or TLS
- [Excessive Resource Usage Verifying X.509 Policy Constraints](https://agentprime.io/advisories/CVE-2023-0464.md)
  `CVE-2023-0464` · CVE record: OpenSSL OpenSSL · CVSS 7.5 High · Not analysed yet · Published 22 Mar 2023 · Tags: Weak cryptography or TLS
- [The c_rehash script allows command injection](https://agentprime.io/advisories/CVE-2022-2068.md)
  `CVE-2022-2068` · CVE record: OpenSSL OpenSSL · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.96 · Not analysed yet · Published 21 Jun 2022 · Tags: Command injection
- [The c_rehash script allows command injection](https://agentprime.io/advisories/CVE-2022-1292.md)
  `CVE-2022-1292` · CVE record: OpenSSL OpenSSL · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.83 · Not analysed yet · Published 3 May 2022 · Tags: Command injection
- [BN_mod_exp may produce incorrect results on MIPS](https://agentprime.io/advisories/CVE-2021-4160.md)
  `CVE-2021-4160` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 28 Jan 2022
- [Incorrect SSLv2 rollback protection](https://agentprime.io/advisories/CVE-2021-23839.md)
  `CVE-2021-23839` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 16 Feb 2021
- [EDIPARTYNAME NULL pointer dereference](https://agentprime.io/advisories/CVE-2020-1971.md)
  `CVE-2020-1971` · CVE record: OpenSSL OpenSSL · CVSS 5.9 Medium · Not analysed yet · Published 8 Dec 2020 · Tags: Memory corruption
- [Raccoon attack](https://agentprime.io/advisories/CVE-2020-1968.md)
  `CVE-2020-1968` · CVE record: OpenSSL OpenSSL · CVSS 3.7 Low · Not analysed yet · Published 9 Sept 2020 · Tags: Information disclosure
- [rsaz_512_sqr overflow bug on x86_64](https://agentprime.io/advisories/CVE-2019-1551.md)
  `CVE-2019-1551` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.14 · Not analysed yet · Published 6 Dec 2019
- [Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey](https://agentprime.io/advisories/CVE-2019-1563.md)
  `CVE-2019-1563` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 10 Sept 2019
- [Fork Protection](https://agentprime.io/advisories/CVE-2019-1549.md)
  `CVE-2019-1549` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 10 Sept 2019
- [ECDSA remote timing attack](https://agentprime.io/advisories/CVE-2019-1547.md)
  `CVE-2019-1547` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 10 Sept 2019
- [Windows builds with insecure path defaults](https://agentprime.io/advisories/CVE-2019-1552.md)
  `CVE-2019-1552` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 30 Jul 2019
- [ChaCha20-Poly1305 with long nonces](https://agentprime.io/advisories/CVE-2019-1543.md)
  `CVE-2019-1543` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 6 Mar 2019
- [0-byte record padding oracle](https://agentprime.io/advisories/CVE-2019-1559.md)
  `CVE-2019-1559` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.17 · Not analysed yet · Published 27 Feb 2019
- [Timing attack against DSA](https://agentprime.io/advisories/CVE-2018-0734.md)
  `CVE-2018-0734` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.12 · Not analysed yet · Published 30 Oct 2018
- [Timing attack against ECDSA signature generation](https://agentprime.io/advisories/CVE-2018-0735.md)
  `CVE-2018-0735` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 29 Oct 2018
- [openssl: A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious…](https://agentprime.io/advisories/CVE-2016-7056.md)
  `CVE-2016-7056` · CVE record: The OpenSSL Project openssl · CVSS 5.5 Medium · Not analysed yet · Published 10 Sept 2018 · Tags: CWE-385
- [Client DoS due to large DH parameter](https://agentprime.io/advisories/CVE-2018-0732.md)
  `CVE-2018-0732` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.47 · Not analysed yet · Published 12 Jun 2018
- [Cache timing vulnerability in RSA Key Generation](https://agentprime.io/advisories/CVE-2018-0737.md)
  `CVE-2018-0737` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.12 · Not analysed yet · Published 16 Apr 2018
- [Constructed ASN.1 types with a recursive definition could exceed the stack](https://agentprime.io/advisories/CVE-2018-0739.md)
  `CVE-2018-0739` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.19 · Not analysed yet · Published 27 Mar 2018
- [Incorrect CRYPTO_memcmp on HP-UX PA-RISC](https://agentprime.io/advisories/CVE-2018-0733.md)
  `CVE-2018-0733` · CVE record: OpenSSL OpenSSL · No CVSS score · Not analysed yet · Published 27 Mar 2018
- [OpenSSL: There is an overflow bug in the AVX2 Montgomery multiplication procedure used in…](https://agentprime.io/advisories/CVE-2017-3738.md)
  `CVE-2017-3738` · CVE record: OpenSSL Software Foundation OpenSSL · No CVSS score · EPSS 0.13 · Not analysed yet · Published 7 Dec 2017
- [OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.](https://agentprime.io/advisories/CVE-2017-3737.md)
  `CVE-2017-3737` · CVE record: OpenSSL Software Foundation OpenSSL · No CVSS score · EPSS 0.79 · Not analysed yet · Published 7 Dec 2017
- [Uncontrolled resource consumption in OpenSSL](https://agentprime.io/advisories/CVE-2016-8610.md)
  `CVE-2016-8610` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.40 · Not analysed yet · Published 13 Nov 2017 · Tags: Denial of service
- [OpenSSL: There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL…](https://agentprime.io/advisories/CVE-2017-3736.md)
  `CVE-2017-3736` · CVE record: OpenSSL Software Foundation OpenSSL · No CVSS score · EPSS 0.10 · Not analysed yet · Published 2 Nov 2017
- [OpenSSL: While parsing an IPAddressFamily extension in an X.509 certificate…](https://agentprime.io/advisories/CVE-2017-3735.md)
  `CVE-2017-3735` · CVE record: OpenSSL Software Foundation OpenSSL · No CVSS score · EPSS 0.21 · Not analysed yet · Published 28 Aug 2017
- [Encrypt-Then-Mac renegotiation crash](https://agentprime.io/advisories/CVE-2017-3733.md)
  `CVE-2017-3733` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.13 · Not analysed yet · Published 4 May 2017
- [BN_mod_exp may produce incorrect results on x86_64](https://agentprime.io/advisories/CVE-2017-3732.md)
  `CVE-2017-3732` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.15 · Not analysed yet · Published 4 May 2017
- [Truncated packet could crash via OOB read](https://agentprime.io/advisories/CVE-2017-3731.md)
  `CVE-2017-3731` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.57 · Not analysed yet · Published 4 May 2017
- [Bad (EC)DHE parameters cause a client crash](https://agentprime.io/advisories/CVE-2017-3730.md)
  `CVE-2017-3730` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.55 · Not analysed yet · Published 4 May 2017
- [ChaCha20/Poly1305 heap-buffer-overflow](https://agentprime.io/advisories/CVE-2016-7054.md)
  `CVE-2016-7054` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.32 · Not analysed yet · Published 4 May 2017
- [CMS Null dereference](https://agentprime.io/advisories/CVE-2016-7053.md)
  `CVE-2016-7053` · CVE record: OpenSSL OpenSSL · No CVSS score · EPSS 0.22 · Not analysed yet · Published 4 May 2017

Newest: <https://agentprime.io/advisories/technology/openssl.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=openssl&cursor=WyIyMDI2LTAxLTI3VDE2OjAxOjIxLjU5NzAwMFoiLCJDVkUtMjAyNS0xNTQ2OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/openssl/?cursor=WyIyMDI2LTAxLTI3VDE2OjAxOjIxLjU5NzAwMFoiLCJDVkUtMjAyNS0xNTQ2OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.