« List of all vendors

OpenSSL

List of Opam related CVEs (146 found)

CVE-2025-15467 – Stack buffer overflow in CMS (Auth)EnvelopedData parsing
1/27/2026
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Critical severity
CVE-2025-11187 – Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
1/27/2026
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2025-11187 – Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
1/27/2026
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2025-4575 – The x509 application adds trusted use instead of rejected use
5/22/2025
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2024-6119 – Possible denial of service in X.509 name checks
9/3/2024
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
High severity
CVE-2024-0727 – PKCS12 Decoding crashes
1/26/2024
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2024-0727 – PKCS12 Decoding crashes
1/26/2024
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-6129 – POLY1305 MAC implementation corrupts vector registers on PowerPC
1/9/2024
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-6129 – POLY1305 MAC implementation corrupts vector registers on PowerPC
1/9/2024
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-5678 – Excessive time spent in DH check / generation with large Q parameter value
11/6/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-5678 – Excessive time spent in DH check / generation with large Q parameter value
11/6/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-5363 – Incorrect cipher key & IV length processing
10/24/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
High severity
CVE-2023-5363 – Incorrect cipher key & IV length processing
10/24/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
High severity
CVE-2023-4807 – POLY1305 MAC implementation corrupts XMM registers on Windows
9/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
High severity
CVE-2023-4807 – POLY1305 MAC implementation corrupts XMM registers on Windows
9/8/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
High severity
CVE-2023-3817 – Excessive time spent checking DH q parameter value
7/31/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-3446 – Excessive time spent checking DH keys and parameters
7/19/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-2975 – AES-SIV implementation ignores empty associated data entries
7/14/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-2650 – Possible DoS translating ASN.1 object identifiers
5/30/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity
CVE-2023-1255 – Input buffer over-read in AES-XTS implementation on 64 bit ARM
4/20/2023
Affected packages: conf-libcurl • conf-libssl • conf-mingw-w64-openssl-i686 • conf-mingw-w64-openssl-x86_64 • conf-openssl ... (6)
Medium severity