0.9.6c * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2014-0076	310			2014-03-25	2017-12-16	1.9	None	Local	Medium	Not required	Partial	None	None
The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.
2	CVE-2013-0166	310		DoS	2013-02-08	2018-08-09	5.0	None	Remote	Low	Not required	None	None	Partial
OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.
3	CVE-2012-2333	189		DoS	2012-05-14	2018-01-05	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.
4	CVE-2012-2110	119	1	DoS Overflow Mem. Corr.	2012-04-19	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
5	CVE-2012-1165	399		DoS	2012-03-15	2018-01-13	5.0	None	Remote	Low	Not required	None	None	Partial
The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.
6	CVE-2012-0884	310			2012-03-13	2018-01-10	5.0	None	Remote	Low	Not required	Partial	None	None
The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.
7	CVE-2012-0027	399		DoS	2012-01-06	2014-03-26	5.0	None	Remote	Low	Not required	None	None	Partial
The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.
8	CVE-2011-4619	399		DoS	2012-01-06	2016-08-23	5.0	None	Remote	Low	Not required	None	None	Partial
The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
9	CVE-2011-4577	399		DoS	2012-01-06	2014-03-26	4.3	None	Remote	Medium	Not required	None	None	Partial
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
10	CVE-2011-4576	310		+Info	2012-01-06	2016-08-23	5.0	None	Remote	Low	Not required	Partial	None	None
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
11	CVE-2011-4108	310			2012-01-06	2016-08-23	4.3	None	Remote	Medium	Not required	Partial	None	None
The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
12	CVE-2011-1945	310			2011-05-31	2013-06-06	2.6	None	Remote	High	Not required	Partial	None	None
The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation.
13	CVE-2010-5298	362		DoS	2014-04-14	2018-10-10	4.0	None	Remote	High	Not required	None	Partial	Partial
Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.
14	CVE-2010-4252	287		Bypass	2010-12-06	2017-09-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
15	CVE-2010-4180				2010-12-06	2017-09-19	4.3	None	Remote	Medium	Not required	None	Partial	None
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
16	CVE-2010-0742	310		Exec Code	2010-06-03	2017-09-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.
17	CVE-2009-4355	399		DoS	2010-01-14	2017-09-19	5.0	None	Remote	Low	Not required	None	None	Partial
Memory leak in the zlib_stateful_finish function in crypto/comp/c_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.
18	CVE-2009-1387	399		DoS	2009-06-04	2017-09-29	5.0	None	Remote	Low	Not required	None	None	Partial
The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a "fragment bug."
19	CVE-2009-1386			DoS	2009-06-04	2017-09-29	5.0	None	Remote	Low	Not required	None	None	Partial
ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.
20	CVE-2009-0789	189		DoS	2009-03-27	2017-08-17	5.0	None	Remote	Low	Not required	None	None	Partial
OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
21	CVE-2008-7270	310			2010-12-06	2012-04-06	4.3	None	Remote	Medium	Not required	None	Partial	None
OpenSSL before 0.9.8j, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the use of a disabled cipher via vectors involving sniffing network traffic to discover a session identifier, a different vulnerability than CVE-2010-4180.
22	CVE-2008-5077	20		Bypass	2009-01-07	2018-10-11	5.8	None	Remote	Medium	Not required	None	Partial	Partial
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
23	CVE-2006-7250			DoS	2012-02-29	2018-01-06	5.0	None	Remote	Low	Not required	None	None	Partial
The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.
24	CVE-2006-4339	310			2006-09-05	2018-10-17	4.3	None	Remote	Medium	Not required	Partial	None	None
OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.
25	CVE-2006-2940	399		DoS	2006-09-28	2018-10-18	7.8	None	Remote	Low	Not required	None	None	Complete
OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification.
26	CVE-2005-2946	310			2005-09-16	2009-01-07	5.0	None	Remote	Low	Not required	None	Partial	None
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.
27	CVE-2005-1797				2005-05-26	2008-09-05	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES implementations.
28	CVE-2004-0975				2005-02-09	2017-10-11	2.1	None	Local	Low	Not required	None	Partial	None
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
29	CVE-2003-0147				2003-03-31	2018-10-19	5.0	None	Remote	Low	Not required	Partial	None	None
OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
30	CVE-2003-0131			+Info	2003-03-24	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."
31	CVE-2003-0078			+Info	2003-03-03	2016-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an information leak (timing discrepancy) that may make it easier to launch cryptographic attacks that rely on distinguishing between padding and MAC verification errors, possibly leading to extraction of the original plaintext, aka the "Vaudenay timing attack."
32	CVE-2002-0659			DoS	2002-08-12	2008-09-10	5.0	None	Remote	Low	Not required	None	None	Partial
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
33	CVE-2002-0656			Exec Code Overflow	2002-08-12	2008-09-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
34	CVE-2002-0655			DoS Exec Code	2002-08-12	2008-09-10	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.

Total number of vulnerabilities : 34 Page : 1 (This Page)