Vendor Dictionary: OpenSSL Project

OpenSSL Project

Short Name:	OpenSSL
Previous Names:	[None Entered]
URL:	http://www.openssl.org/ [visit link]
Email:	openssl-devopenssl.org
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]
Full Details...

Vulnerabilities by Vendor Product

OpenSSL Project

OpenSSL Project

OpenSSL: 0.9.1x; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3936 OpenSSL Session Reuse Bypass of Client Certificate Access Control; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.2x; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.3x; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.4x; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.5x; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.6; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 4318 OpenSSL TLS Infinite Loop DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6a; OSVDB ID: 853 OpenSSL PRNG Information Disclosure; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4318 OpenSSL TLS Infinite Loop DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.6b; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4318 OpenSSL TLS Infinite Loop DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.6c; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4318 OpenSSL TLS Infinite Loop DoS; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.6d; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.7-beta2; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3941 OpenSSL SSLv3 Session ID Buffer Overflow; OSVDB ID: 3940 OpenSSL ASCII Integer Overflow; OSVDB ID: 3942 OpenSSL SSLv3 with Kerberos Master Key Overflow; OSVDB ID: 857 OpenSSL SSLv2 Client Master Key Overflow; 0.9.6k; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 2765 OpenSSL ASN.1 Large Recursion DoS; 0.9.7; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3684 OpenSSL ASN.1 Client Certificate Double-free; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.7a; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3947 OpenSSL Non-RSA Blinding Private Key Disclosure; OSVDB ID: 4316 OpenSSL Kerberos SSL/TLS Handshake DoS; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3684 OpenSSL ASN.1 Client Certificate Double-free; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.7b; OSVDB ID: 4316 OpenSSL Kerberos SSL/TLS Handshake DoS; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3684 OpenSSL ASN.1 Client Certificate Double-free; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6e; OSVDB ID: 3944 OpenSSL SSLv2 Failed Assertion DoS; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6f; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6g; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6h; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3945 OpenSSL Vaudenay Timing Attack; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6i; OSVDB ID: 3946 OpenSSL RSA Klima-Pokorny-Rosa Attack; OSVDB ID: 3947 OpenSSL Non-RSA Blinding Private Key Disclosure; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.6j; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; OSVDB ID: 3686 OpenSSL ASN.1 Client Certificate Overflow DoS; OSVDB ID: 3949 OpenSSL ASN.1 Integer Overflow DoS; 0.9.2; OSVDB ID: 3936 OpenSSL Session Reuse Bypass of Client Certificate Access Control; 0.9.2a; OSVDB ID: 3936 OpenSSL Session Reuse Bypass of Client Certificate Access Control; 0.9.4; OSVDB ID: 3938 OpenSSL and OpenSSH /dev/random Check Failure; 0.9.7-beta1; OSVDB ID: 3943 OpenSSL ASN.1 Parser Invalid Encoding DoS; OSVDB ID: 3942 OpenSSL SSLv3 with Kerberos Master Key Overflow; 0.9.7c; OSVDB ID: 4316 OpenSSL Kerberos SSL/TLS Handshake DoS; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; 0.9.6l; OSVDB ID: 4317 OpenSSL SSL/TLS Handshake Null Pointer DoS; 0.9.6x; OSVDB ID: 11125 OpenSSL der_chop Script Symlink Arbitrary File Modification; 0.9.7j; OSVDB ID: 28549 OpenSSL RSA Key PKCS #1 v1.5 Signature Forgery; 0.9.8b; OSVDB ID: 28549 OpenSSL RSA Key PKCS #1 v1.5 Signature Forgery; 0.9.8i; OSVDB ID: 51164 OpenSSL EVP_VerifyFinal Function DSA / ECDSA Key Validation Weakness

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.