Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

OpenSSL Software Foundation vulnerabilities

4 published CVEs name OpenSSL Software Foundation among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2017-3738

    There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis…

    OpenSSL Software Foundation · OpenSSL

    Medium5.9
  • CVE-2017-3737

    OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then…

    OpenSSL Software Foundation · OpenSSL

    Medium5.9
  • CVE-2017-3736

    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected.…

    OpenSSL Software Foundation · OpenSSL

    Medium6.5
  • CVE-2017-3735

    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of…

    OpenSSL Software Foundation · OpenSSL

    Medium5.3
All 4 in the list