Patchfirst
Patchfirst

Vendor

OpenSSL

1 of 14 OpenSSL CVEs in Patchfirst (7%) are in of vulnerabilities exploited in the wild.

CVEs
14
In CISA KEV
17%
Known ransomware use
0
Median days to KEV
2,949
from publication
Latest KEV listing
4 May 2022
Watch OpenSSL Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • OpenSSL In KEV: 1 CVEs: 14

Top ATT&CK techniques

What attackers do with OpenSSL CVEs
Open in ATT&CK Navigator

Counts are OpenSSL CVEs linked to the technique. Each link’s provenance is on the CVE page.

OpenSSL CVEs

14 CVEs, by priority
  1. CVE-2014-0160OpenSSL Information Disclosure Vulnerability
    OpenSSL · OpenSSLKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    >99.9%Top 0.01%
    72.1priority
  2. CVE-2022-1292The c_rehash script allows command injection
    OpenSSL · OpenSSLPublic exploitCritical · 9.8
    82.6%Top 0.33%
    34.8priority
  3. CVE-2022-3786X.509 Email Address Variable Length Buffer Overflow
    OpenSSL · OpenSSLPublic exploitHigh · 7.5
    92.5%Top 0.18%
    33.2priority
  4. CVE-2022-3602X.509 Email Address 4-byte Buffer Overflow
    OpenSSL · OpenSSLPublic exploitHigh · 7.5
    90.8%Top 0.2%
    33.2priority
  5. CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    OpenSSL · OpenSSLPublic exploitHigh · 7.5
    73.2%Top 0.54%
    33.1priority
  6. CVE-2025-15467Stack buffer overflow in CMS (Auth)EnvelopedData parsing
    OpenSSL · OpenSSLPublic exploitHigh · 8.8
    74.8%Top 0.5%
    32.4priority
  7. CVE-2022-2068The c_rehash script allows command injection
    OpenSSL · OpenSSLCritical · 9.8
    96.4%Top 0.12%
    29.8priority
  8. CVE-2023-0286X.400 address type confusion in X.509 GeneralName
    OpenSSL · OpenSSLHigh · 7.4
    69.3%Top 0.64%
    28.1priority
  9. CVE-2021-3449NULL pointer deref in signature_algorithms processing
    OpenSSL · OpenSSLPublic exploit
    63.5%Top 0.79%
    26.4priority
  10. CVE-2024-6119Possible denial of service in X.509 name checks
    OpenSSL · OpenSSLHigh · 7.5
    66.6%Top 0.71%
    26.2priority
  11. CVE-2023-2650Possible DoS translating ASN.1 object identifiers
    OpenSSL · OpenSSLMedium · 6.5
    75.4%Top 0.49%
    26.2priority
  12. CVE-2017-3730Bad (EC)DHE parameters cause a client crash
    OpenSSL · OpenSSLPublic exploit
    55.3%Top 0.97%
    24.8priority
  13. CVE-2021-3711SM2 Decryption Buffer Overflow
    OpenSSL · OpenSSL
    87.8%Top 0.24%
    21.3priority
  14. CVE-2017-3731Truncated packet could crash via OOB read
    OpenSSL · OpenSSL
    57.3%Top 0.92%
    19.8priority
↑ ↓ chooseEnter openEsc close