Vulnerabilities

TI-2016-00716 CVE-2016-0799 · GHSA-x493-jjcm-ffg2

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2…

HIGH 67

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bou…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.32414 Published 2016-03-03 Partial fix CWE-119

TI-2016-00717 CVE-2016-0800 · GHSA-fqw2-3v24-gc79

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other…

HIGH 67

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, wh…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.82112 Published 2016-03-01 Partial fix CWE-200

Vulnerabilities

Filters

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2…

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other…