Product by Debian
Openssl
106 known vulnerabilities in Openssl (Debian), 1 of them actively exploited (CISA KEV).
Key figures
106
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2014-0160 | OpenSSL Information Disclosure Vulnerability In CISA KEValso in 20 other products | 7.5 | |
| High | CVE-2025-15467 | Stack buffer overflow in CMS (Auth)EnvelopedData parsing | 8.8 | |
| Critical | CVE-2021-3711 | SM2 Decryption Buffer Overflow | 9.8 | |
| Critical | CVE-2009-3555 | OpenSSL: security vulnerability | 9.8 | |
| High | CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | 8.8 | |
| Critical | CVE-2016-0705 | OpenSSL: Double Free | 9.8 | |
| High | CVE-2024-6119 | Possible denial of service in X.509 name checks | 7.5 | |
| Critical | CVE-2018-16395 | Ruby: security vulnerability | 9.8 | |
| High | CVE-2023-0286 | X.400 address type confusion in X.509 GeneralName | 7.4 | |
| Critical | CVE-2022-2068 | The c_rehash script allows command injection | 7.3 | |
| High | CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | |
| Critical | CVE-2022-1292 | The c_rehash script allows command injection | 7.3 | |
| High | CVE-2022-4450 | Double free after calling PEM_read_bio_ex | 7.5 | |
| High | CVE-2008-0166 | OpenSSL: security vulnerability | 7.5 | |
| High | CVE-2020-1967 | Segmentation fault in SSL_check_chain | 7.5 | |
| High | CVE-2021-23840 | Integer overflow in CipherUpdate | 7.5 | |
| High | CVE-2018-0732 | Client DoS due to large DH parameter | 7.5 | |
| High | CVE-2015-3194 | OpenSSL: NULL Pointer Dereference | 7.5 | |
| High | CVE-2016-8610 | OpenSSL: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2016-2105 | OpenSSL: Integer Overflow | 7.5 | |
| High | CVE-2021-3712 | Read buffer overruns processing ASN.1 strings | 7.4 | |
| Medium | CVE-2023-2650 | Possible DoS translating ASN.1 object identifiers | 6.5 | |
| High | CVE-2016-0797 | OpenSSL: Integer Overflow | 7.5 | |
| High | CVE-2026-18798 | QUIC Server May Trigger Double Free When Processing INITIAL Packet | 7.5 | |
| Medium | CVE-2016-2107 | OpenSSL: security vulnerability | 5.9 |
News
- Oracle’s July update fixes ten 10.0 vulnerabilities in Fusion Middlewarecsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- Oracle’s first monthly patch release fixes 35 flaws, including 11 rated ‘critical’csoonline,
- OpenSSL CVE-2025-15467fortinet-psirt,
- Vulnerability in OpenSSL libraryfortinet-psirt,