Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/4074?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "type": "deb", "namespace": "debian", "name": "openssl", "version": "1.0.1e-2+deb7u20", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.0.14-1~deb12u1", "latest_non_vulnerable_version": "3.5.5-1", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61375?format=api", "vulnerability_id": "VCID-14yd-vsj7-e3bv", "summary": "The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the \"POODLE\" issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3566.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3566", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.93538", "scoring_system": "epss", "scoring_elements": "0.99838", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.93538", "scoring_system": "epss", "scoring_elements": "0.99837", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3566" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6587" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6591" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6593" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6601" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0383" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0395" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0407" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0408" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0410" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0412" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html", "reference_id": "0101.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html" }, { "reference_url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7", "reference_id": "1015-security-advisory-7", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.arista.com/en/support/advisories-notices/security-advisories/1015-security-advisory-7" }, { "reference_url": "http://www.securitytracker.com/id/1031029", "reference_id": "1031029", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031029" }, { "reference_url": "http://www.securitytracker.com/id/1031039", "reference_id": "1031039", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031039" }, { "reference_url": "http://www.securitytracker.com/id/1031085", "reference_id": "1031085", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031085" }, { "reference_url": "http://www.securitytracker.com/id/1031086", "reference_id": "1031086", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031086" }, { "reference_url": "http://www.securitytracker.com/id/1031087", "reference_id": "1031087", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031087" }, { "reference_url": "http://www.securitytracker.com/id/1031088", "reference_id": "1031088", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031088" }, { "reference_url": "http://www.securitytracker.com/id/1031089", "reference_id": "1031089", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031089" }, { "reference_url": "http://www.securitytracker.com/id/1031090", "reference_id": "1031090", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031090" }, { "reference_url": "http://www.securitytracker.com/id/1031091", "reference_id": "1031091", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031091" }, { "reference_url": "http://www.securitytracker.com/id/1031092", "reference_id": "1031092", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031092" }, { "reference_url": "http://www.securitytracker.com/id/1031093", "reference_id": "1031093", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031093" }, { "reference_url": "http://www.securitytracker.com/id/1031094", "reference_id": "1031094", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031094" }, { "reference_url": "http://www.securitytracker.com/id/1031095", "reference_id": "1031095", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031095" }, { "reference_url": "http://www.securitytracker.com/id/1031096", "reference_id": "1031096", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031096" }, { "reference_url": "http://www.securitytracker.com/id/1031105", "reference_id": "1031105", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031105" }, { "reference_url": "http://www.securitytracker.com/id/1031106", "reference_id": "1031106", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031106" }, { "reference_url": "http://www.securitytracker.com/id/1031107", "reference_id": "1031107", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031107" }, { "reference_url": "http://www.securitytracker.com/id/1031120", "reference_id": "1031120", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031120" }, { "reference_url": "http://www.securitytracker.com/id/1031123", "reference_id": "1031123", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031123" }, { "reference_url": "http://www.securitytracker.com/id/1031124", "reference_id": "1031124", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031124" }, { "reference_url": "http://www.securitytracker.com/id/1031130", "reference_id": "1031130", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031130" }, { "reference_url": "http://www.securitytracker.com/id/1031131", "reference_id": "1031131", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031131" }, { "reference_url": "http://www.securitytracker.com/id/1031132", "reference_id": "1031132", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securitytracker.com/id/1031132" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789", "reference_id": "1152789", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152789" }, { "reference_url": "https://access.redhat.com/articles/1232123", "reference_id": "1232123", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://access.redhat.com/articles/1232123" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html", "reference_id": "141114.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html", "reference_id": "141158.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html", "reference_id": "142330.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html", "reference_id": "169361.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html", "reference_id": "169374.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html" }, { "reference_url": "https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html", "reference_id": "2014-10-14-how-poodle-happened.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.dfranke.us/posts/2014-10-14-how-poodle-happened.html" }, { "reference_url": "https://technet.microsoft.com/library/security/3009008.aspx", "reference_id": "3009008.aspx", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://technet.microsoft.com/library/security/3009008.aspx" }, { "reference_url": "http://www.securityfocus.com/archive/1/533746", "reference_id": "533746", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securityfocus.com/archive/1/533746" }, { "reference_url": "http://www.securityfocus.com/archive/1/533747", "reference_id": "533747", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securityfocus.com/archive/1/533747" }, { "reference_url": "http://www.kb.cert.org/vuls/id/577193", "reference_id": "577193", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.kb.cert.org/vuls/id/577193" }, { "reference_url": "http://secunia.com/advisories/59627", "reference_id": "59627", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/59627" }, { "reference_url": "http://secunia.com/advisories/60056", "reference_id": "60056", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/60056" }, { "reference_url": "http://secunia.com/advisories/60206", "reference_id": "60206", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/60206" }, { "reference_url": "http://secunia.com/advisories/60792", "reference_id": "60792", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/60792" }, { "reference_url": "http://secunia.com/advisories/60859", "reference_id": "60859", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/60859" }, { "reference_url": "http://secunia.com/advisories/61019", "reference_id": "61019", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61019" }, { "reference_url": "http://secunia.com/advisories/61130", "reference_id": "61130", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61130" }, { "reference_url": "http://secunia.com/advisories/61303", "reference_id": "61303", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61303" }, { "reference_url": "http://secunia.com/advisories/61316", "reference_id": "61316", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61316" }, { "reference_url": "http://secunia.com/advisories/61345", "reference_id": "61345", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61345" }, { "reference_url": "http://secunia.com/advisories/61359", "reference_id": "61359", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61359" }, { "reference_url": "http://secunia.com/advisories/61782", "reference_id": "61782", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61782" }, { "reference_url": "http://secunia.com/advisories/61810", "reference_id": "61810", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61810" }, { "reference_url": "http://secunia.com/advisories/61819", "reference_id": "61819", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61819" }, { "reference_url": "http://secunia.com/advisories/61825", "reference_id": "61825", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61825" }, { "reference_url": "http://secunia.com/advisories/61827", "reference_id": "61827", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61827" }, { "reference_url": "http://secunia.com/advisories/61926", "reference_id": "61926", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61926" }, { "reference_url": "http://secunia.com/advisories/61995", "reference_id": "61995", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://secunia.com/advisories/61995" }, { "reference_url": "http://www.securityfocus.com/bid/70574", "reference_id": "70574", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securityfocus.com/bid/70574" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765539", "reference_id": "765539", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765539" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765702", "reference_id": "765702", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765702" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768164", "reference_id": "768164", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=768164" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769904", "reference_id": "769904", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769904" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771359", "reference_id": "771359", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771359" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:203", "reference_id": "advisories?name=MDVSA-2014:203", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:203" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062", "reference_id": "advisories?name=MDVSA-2015:062", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" }, { "reference_url": "http://downloads.asterisk.org/pub/security/AST-2014-011.html", "reference_id": "AST-2014-011.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://downloads.asterisk.org/pub/security/AST-2014-011.html" }, { "reference_url": "http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html", "reference_id": "attack-of-week-poodle.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html" }, { "reference_url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle", "reference_id": "cisco-sa-20141015-poodle", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle" }, { "reference_url": "http://support.citrix.com/article/CTX200238", "reference_id": "CTX200238", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://support.citrix.com/article/CTX200238" }, { "reference_url": "https://support.citrix.com/article/CTX216642", "reference_id": "CTX216642", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.citrix.com/article/CTX216642" }, { "reference_url": "http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html", "reference_id": "CVE-2014-3566.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3566.html" }, { "reference_url": "https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip", "reference_id": "cve-2014-3566-removing-sslv3-from-big-ip", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://devcentral.f5.com/articles/cve-2014-3566-removing-sslv3-from-big-ip" }, { "reference_url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581", "reference_id": "display?docId=emr_na-c04583581", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581" }, { "reference_url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034", "reference_id": "display?docId=emr_na-c04779034", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635", "reference_id": "docDisplay?docId=emr_na-c04819635", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681", "reference_id": "docDisplay?docId=emr_na-c05068681", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667", "reference_id": "docDisplay?docId=emr_na-c05157667", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946", "reference_id": "docDisplay?docId=emr_na-c05301946", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05301946" }, { "reference_url": "https://www.suse.com/support/kb/doc.php?id=7015773", "reference_id": "doc.php?id=7015773", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.suse.com/support/kb/doc.php?id=7015773" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431", "reference_id": "docview.wss?uid=isg3T1021431", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021431" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439", "reference_id": "docview.wss?uid=isg3T1021439", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686997", "reference_id": "docview.wss?uid=swg21686997", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21686997" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687172", "reference_id": "docview.wss?uid=swg21687172", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687172" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611", "reference_id": "docview.wss?uid=swg21687611", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21687611" }, { "reference_url": "https://www-01.ibm.com/support/docview.wss?uid=swg21688165", "reference_id": "docview.wss?uid=swg21688165", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www-01.ibm.com/support/docview.wss?uid=swg21688165" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21688283", "reference_id": "docview.wss?uid=swg21688283", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21688283" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692299", "reference_id": "docview.wss?uid=swg21692299", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21692299" }, { "reference_url": "http://www.debian.org/security/2014/dsa-3053", "reference_id": "dsa-3053", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.debian.org/security/2014/dsa-3053" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3144", "reference_id": "dsa-3144", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3144" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3147", "reference_id": "dsa-3147", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3147" }, { "reference_url": "http://www.debian.org/security/2016/dsa-3489", "reference_id": "dsa-3489", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.debian.org/security/2016/dsa-3489" }, { "reference_url": "https://security.gentoo.org/glsa/201411-10", "reference_id": "GLSA-201411-10", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201411-10" }, { "reference_url": "https://security.gentoo.org/glsa/201507-14", "reference_id": "GLSA-201507-14", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://security.gentoo.org/glsa/201507-14" }, { "reference_url": "https://security.gentoo.org/glsa/201606-11", "reference_id": "GLSA-201606-11", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://security.gentoo.org/glsa/201606-11" }, { "reference_url": "http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566", "reference_id": "how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566" }, { "reference_url": "http://support.apple.com/HT204244", "reference_id": "HT204244", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://support.apple.com/HT204244" }, { "reference_url": "https://support.apple.com/kb/HT6527", "reference_id": "HT6527", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6527" }, { "reference_url": "https://support.apple.com/kb/HT6529", "reference_id": "HT6529", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6529" }, { "reference_url": "https://support.apple.com/kb/HT6531", "reference_id": "HT6531", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6531" }, { "reference_url": "https://support.apple.com/kb/HT6535", "reference_id": "HT6535", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6535" }, { "reference_url": "https://support.apple.com/kb/HT6541", "reference_id": "HT6541", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6541" }, { "reference_url": "https://support.apple.com/kb/HT6542", "reference_id": "HT6542", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.apple.com/kb/HT6542" }, { "reference_url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm", "reference_id": "hw-405500.htm", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-405500.htm" }, { "reference_url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02", "reference_id": "ICSMA-18-058-02", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02" }, { "reference_url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "reference_id": "index?page=content&id=JSA10705", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10090", "reference_id": "index?page=content&id=SB10090", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10090" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10091", "reference_id": "index?page=content&id=SB10091", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10091" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10104", "reference_id": "index?page=content&id=SB10104", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10104" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141450452204552&w=2", "reference_id": "?l=bugtraq&m=141450452204552&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141450452204552&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141450973807288&w=2", "reference_id": "?l=bugtraq&m=141450973807288&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141450973807288&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141477196830952&w=2", "reference_id": "?l=bugtraq&m=141477196830952&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141477196830952&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141576815022399&w=2", "reference_id": "?l=bugtraq&m=141576815022399&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141576815022399&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141577087123040&w=2", "reference_id": "?l=bugtraq&m=141577087123040&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141577087123040&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141577350823734&w=2", "reference_id": "?l=bugtraq&m=141577350823734&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141577350823734&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141620103726640&w=2", "reference_id": "?l=bugtraq&m=141620103726640&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141620103726640&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141628688425177&w=2", "reference_id": "?l=bugtraq&m=141628688425177&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141628688425177&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141694355519663&w=2", "reference_id": "?l=bugtraq&m=141694355519663&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141694355519663&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141697638231025&w=2", "reference_id": "?l=bugtraq&m=141697638231025&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141697638231025&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141697676231104&w=2", "reference_id": "?l=bugtraq&m=141697676231104&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141697676231104&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141703183219781&w=2", "reference_id": "?l=bugtraq&m=141703183219781&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141703183219781&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141715130023061&w=2", "reference_id": "?l=bugtraq&m=141715130023061&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141715130023061&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141775427104070&w=2", "reference_id": "?l=bugtraq&m=141775427104070&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141775427104070&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141813976718456&w=2", "reference_id": "?l=bugtraq&m=141813976718456&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141813976718456&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141814011518700&w=2", "reference_id": "?l=bugtraq&m=141814011518700&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141814011518700&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141879378918327&w=2", "reference_id": "?l=bugtraq&m=141879378918327&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141879378918327&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142103967620673&w=2", "reference_id": "?l=bugtraq&m=142103967620673&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142103967620673&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142118135300698&w=2", "reference_id": "?l=bugtraq&m=142118135300698&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142118135300698&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142296755107581&w=2", "reference_id": "?l=bugtraq&m=142296755107581&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142296755107581&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142350196615714&w=2", "reference_id": "?l=bugtraq&m=142350196615714&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142350196615714&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142350298616097&w=2", "reference_id": "?l=bugtraq&m=142350298616097&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142350298616097&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142350743917559&w=2", "reference_id": "?l=bugtraq&m=142350743917559&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142350743917559&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142354438527235&w=2", "reference_id": "?l=bugtraq&m=142354438527235&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142354438527235&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142357976805598&w=2", "reference_id": "?l=bugtraq&m=142357976805598&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142357976805598&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142495837901899&w=2", "reference_id": "?l=bugtraq&m=142495837901899&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142495837901899&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142496355704097&w=2", "reference_id": "?l=bugtraq&m=142496355704097&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142496355704097&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142546741516006&w=2", "reference_id": "?l=bugtraq&m=142546741516006&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142546741516006&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142607790919348&w=2", "reference_id": "?l=bugtraq&m=142607790919348&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142607790919348&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142624590206005&w=2", "reference_id": "?l=bugtraq&m=142624590206005&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142624590206005&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142624619906067", "reference_id": "?l=bugtraq&m=142624619906067", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142624619906067" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142624619906067&w=2", "reference_id": "?l=bugtraq&m=142624619906067&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142624619906067&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142624679706236&w=2", "reference_id": "?l=bugtraq&m=142624679706236&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142624679706236&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142624719706349&w=2", "reference_id": "?l=bugtraq&m=142624719706349&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142624719706349&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142721830231196&w=2", "reference_id": "?l=bugtraq&m=142721830231196&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142721830231196&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142721887231400&w=2", "reference_id": "?l=bugtraq&m=142721887231400&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142721887231400&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142740155824959&w=2", "reference_id": "?l=bugtraq&m=142740155824959&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142740155824959&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142791032306609&w=2", "reference_id": "?l=bugtraq&m=142791032306609&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142791032306609&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142804214608580&w=2", "reference_id": "?l=bugtraq&m=142804214608580&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142804214608580&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142805027510172&w=2", "reference_id": "?l=bugtraq&m=142805027510172&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142805027510172&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=142962817202793&w=2", "reference_id": "?l=bugtraq&m=142962817202793&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=142962817202793&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143039249603103&w=2", "reference_id": "?l=bugtraq&m=143039249603103&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143039249603103&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143101048219218&w=2", "reference_id": "?l=bugtraq&m=143101048219218&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143101048219218&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143290371927178&w=2", "reference_id": "?l=bugtraq&m=143290371927178&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143290371927178&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143290437727362&w=2", "reference_id": "?l=bugtraq&m=143290437727362&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143290437727362&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143290522027658&w=2", "reference_id": "?l=bugtraq&m=143290522027658&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143290522027658&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143290583027876&w=2", "reference_id": "?l=bugtraq&m=143290583027876&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143290583027876&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143558137709884&w=2", "reference_id": "?l=bugtraq&m=143558137709884&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143558137709884&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143558192010071&w=2", "reference_id": "?l=bugtraq&m=143558192010071&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143558192010071&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143628269912142&w=2", "reference_id": "?l=bugtraq&m=143628269912142&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143628269912142&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144101915224472&w=2", "reference_id": "?l=bugtraq&m=144101915224472&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144101915224472&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144251162130364&w=2", "reference_id": "?l=bugtraq&m=144251162130364&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144251162130364&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144294141001552&w=2", "reference_id": "?l=bugtraq&m=144294141001552&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144294141001552&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=145983526810210&w=2", "reference_id": "?l=bugtraq&m=145983526810210&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=bugtraq&m=145983526810210&w=2" }, { "reference_url": "http://marc.info/?l=openssl-dev&m=141333049205629&w=2", "reference_id": "?l=openssl-dev&m=141333049205629&w=2", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://marc.info/?l=openssl-dev&m=141333049205629&w=2" }, { "reference_url": "http://advisories.mageia.org/MGASA-2014-0416.html", "reference_id": "MGASA-2014-0416.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://advisories.mageia.org/MGASA-2014-0416.html" }, { "reference_url": "http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf", "reference_id": "MOVEitReleaseNotes82.pdf", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html", "reference_id": "msg00002.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html" }, { "reference_url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html", "reference_id": "msg00003.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html", "reference_id": "msg00003.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html", "reference_id": "msg00008.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html", "reference_id": "msg00018.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html", "reference_id": "msg00021.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html", "reference_id": "msg00026.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html", "reference_id": "msg00027.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html", "reference_id": "msg00027.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html", "reference_id": "msg00033.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html", "reference_id": "msg00036.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html", "reference_id": "msg00066.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html" }, { "reference_url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6", "reference_id": "multiple_vulnerabilities_in_openssl6", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_openssl6" }, { "reference_url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc", "reference_id": "NetBSD-SA2014-015.txt.asc", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc" }, { "reference_url": "http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/", "reference_id": "node-v0-10-33-stable", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20141015-0001/", "reference_id": "ntap-20141015-0001", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20141015-0001/" }, { "reference_url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc", "reference_id": "openssl_advisory11.asc", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc" }, { "reference_url": "https://support.lenovo.com/product_security/poodle", "reference_id": "poodle", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.lenovo.com/product_security/poodle" }, { "reference_url": "https://support.lenovo.com/us/en/product_security/poodle", "reference_id": "poodle", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://support.lenovo.com/us/en/product_security/poodle" }, { "reference_url": "https://www.imperialviolet.org/2014/10/14/poodle.html", "reference_id": "poodle.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.imperialviolet.org/2014/10/14/poodle.html" }, { "reference_url": "https://github.com/mpgn/poodle-PoC", "reference_id": "poodle-PoC", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://github.com/mpgn/poodle-PoC" }, { "reference_url": "https://puppet.com/security/cve/poodle-sslv3-vulnerability", "reference_id": "poodle-sslv3-vulnerability", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://puppet.com/security/cve/poodle-sslv3-vulnerability" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1652.html", "reference_id": "RHSA-2014-1652.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1652.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1653.html", "reference_id": "RHSA-2014-1653.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1653.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1692.html", "reference_id": "RHSA-2014-1692.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1692.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1876", "reference_id": "RHSA-2014:1876", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1876" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1876.html", "reference_id": "RHSA-2014-1876.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1876.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1877", "reference_id": "RHSA-2014:1877", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1877" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1877.html", "reference_id": "RHSA-2014-1877.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1877.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1880", "reference_id": "RHSA-2014:1880", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1880" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1880.html", "reference_id": "RHSA-2014-1880.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1880.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1881", "reference_id": "RHSA-2014:1881", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1881" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1881.html", "reference_id": "RHSA-2014-1881.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1881.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1882", "reference_id": "RHSA-2014:1882", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1882" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1882.html", "reference_id": "RHSA-2014-1882.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1882.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1920", "reference_id": "RHSA-2014:1920", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1920" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1920.html", "reference_id": "RHSA-2014-1920.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1920.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1948.html", "reference_id": "RHSA-2014-1948.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1948.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0010", "reference_id": "RHSA-2015:0010", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0010" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0011", "reference_id": "RHSA-2015:0011", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0011" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0012", "reference_id": "RHSA-2015:0012", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0012" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0067", "reference_id": "RHSA-2015:0067", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0067" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0068", "reference_id": "RHSA-2015:0068", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0068" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html", "reference_id": "RHSA-2015-0068.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0068.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0069", "reference_id": "RHSA-2015:0069", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0069" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0079", "reference_id": "RHSA-2015:0079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0079" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html", "reference_id": "RHSA-2015-0079.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0079.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0080", "reference_id": "RHSA-2015:0080", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0080" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html", "reference_id": "RHSA-2015-0080.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0080.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0085", "reference_id": "RHSA-2015:0085", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0085" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html", "reference_id": "RHSA-2015-0085.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0085.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0086", "reference_id": "RHSA-2015:0086", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0086" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html", "reference_id": "RHSA-2015-0086.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0086.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0264", "reference_id": "RHSA-2015:0264", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0264" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html", "reference_id": "RHSA-2015-0264.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0264.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html", "reference_id": "RHSA-2015-0698.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0698.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1545", "reference_id": "RHSA-2015:1545", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1545" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1545.html", "reference_id": "RHSA-2015-1545.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1545.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1546", "reference_id": "RHSA-2015:1546", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1546" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1546.html", "reference_id": "RHSA-2015-1546.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1546.html" }, { "reference_url": "https://bto.bluecoat.com/security-advisory/sa83", "reference_id": "sa83", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://bto.bluecoat.com/security-advisory/sa83" }, { "reference_url": "https://www.openssl.org/news/secadv_20141015.txt", "reference_id": "secadv_20141015.txt", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.openssl.org/news/secadv_20141015.txt" }, { "reference_url": "http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx", "reference_id": "security-advisory-3009008-released.aspx", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1076983", "reference_id": "show_bug.cgi?id=1076983", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1076983" }, { "reference_url": "https://www.openssl.org/~bodo/ssl-poodle.pdf", "reference_id": "ssl-poodle.pdf", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://www.openssl.org/~bodo/ssl-poodle.pdf" }, { "reference_url": "http://www.us-cert.gov/ncas/alerts/TA14-290A", "reference_id": "TA14-290A", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.us-cert.gov/ncas/alerts/TA14-290A" }, { "reference_url": "https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/", "reference_id": "the-poodle-attack-and-the-end-of-ssl-3-0", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/" }, { "reference_url": "http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html", "reference_id": "this-poodle-bites-exploiting-ssl-30.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html" }, { "reference_url": "http://www.securityfocus.com/archive/1/533724/100/0/threaded", "reference_id": "threaded", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.securityfocus.com/archive/1/533724/100/0/threaded" }, { "reference_url": "https://usn.ubuntu.com/2486-1/", "reference_id": "USN-2486-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2486-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2486-1", "reference_id": "USN-2486-1", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2486-1" }, { "reference_url": "https://usn.ubuntu.com/2487-1/", "reference_id": "USN-2487-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2487-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2487-1", "reference_id": "USN-2487-1", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2487-1" }, { "reference_url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html", "reference_id": "VMSA-2015-0003.html", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.vmware.com/security/advisories/VMSA-2015-0003.html" }, { "reference_url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_id": "Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_type": "", "scores": [ { "value": "3.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:34:07Z/" } ], "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3566" ], "risk_score": 6.2, "exploitability": "2.0", "weighted_severity": "3.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-14yd-vsj7-e3bv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44398?format=api", "vulnerability_id": "VCID-1hgm-58xg-r7bt", "summary": "Timing based side channel\nA timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4304.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4304.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00224", "scoring_system": "epss", "scoring_elements": "0.45202", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00224", "scoring_system": "epss", "scoring_elements": "0.45151", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00224", "scoring_system": "epss", "scoring_elements": "0.45219", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00224", "scoring_system": "epss", "scoring_elements": "0.45223", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2023-0007.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2023-0007.html" }, { "reference_url": "https://security.gentoo.org/glsa/202402-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:19Z/" } ], "url": "https://security.gentoo.org/glsa/202402-08" }, { "reference_url": "https://www.openssl.org/news/secadv/20230207.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:19Z/" } ], "url": "https://www.openssl.org/news/secadv/20230207.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164487", "reference_id": "2164487", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164487" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4304", "reference_id": "CVE-2022-4304", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4304" }, { "reference_url": "https://github.com/advisories/GHSA-p52g-cm5j-mjv4", "reference_id": "GHSA-p52g-cm5j-mjv4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p52g-cm5j-mjv4" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0946", "reference_id": "RHSA-2023:0946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1199", "reference_id": "RHSA-2023:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1405", "reference_id": "RHSA-2023:1405", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1405" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2165", "reference_id": "RHSA-2023:2165", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2165" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2932", "reference_id": "RHSA-2023:2932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3354", "reference_id": "RHSA-2023:3354", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3354" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3355", "reference_id": "RHSA-2023:3355", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3355" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3408", "reference_id": "RHSA-2023:3408", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3408" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3420", "reference_id": "RHSA-2023:3420", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3420" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3421", "reference_id": "RHSA-2023:3421", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3421" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4128", "reference_id": "RHSA-2023:4128", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4128" }, { "reference_url": "https://usn.ubuntu.com/5844-1/", "reference_id": "USN-5844-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5844-1/" }, { "reference_url": "https://usn.ubuntu.com/6564-1/", "reference_id": "USN-6564-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6564-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2022-4304", "GHSA-p52g-cm5j-mjv4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1hgm-58xg-r7bt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97111?format=api", "vulnerability_id": "VCID-1vv2-224u-8ff5", "summary": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92688", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.927", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92696", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92692", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180185", "reference_id": "1180185", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3572" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1vv2-224u-8ff5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5618?format=api", "vulnerability_id": "VCID-249a-9kqa-p7an", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3449.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3449.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3449", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09859", "scoring_system": "epss", "scoring_elements": "0.93136", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.09859", "scoring_system": "epss", "scoring_elements": "0.93139", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09859", "scoring_system": "epss", "scoring_elements": "0.93128", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3449" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3449" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10356", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10356" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0055", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0055.html" }, { "reference_url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" }, { "reference_url": "https://security.gentoo.org/glsa/202103-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-03" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210326-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210326-0006" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210326-0006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210513-0002", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210513-0002" }, { "reference_url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4875", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4875" }, { "reference_url": "https://www.openssl.org/news/secadv/20210325.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.openssl.org/news/secadv/20210325.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com//security-alerts/cpujul2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-05", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-05" }, { "reference_url": "https://www.tenable.com/security/tns-2021-06", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-06" }, { "reference_url": "https://www.tenable.com/security/tns-2021-09", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-09" }, { "reference_url": "https://www.tenable.com/security/tns-2021-10", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-10" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/27/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/27/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/28/3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/28/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941554", "reference_id": "1941554", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941554" }, { "reference_url": "https://security.archlinux.org/ASA-202103-10", "reference_id": "ASA-202103-10", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202103-10" }, { "reference_url": "https://security.archlinux.org/AVG-1736", "reference_id": "AVG-1736", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1736" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449", "reference_id": "CVE-2021-3449", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3449" }, { "reference_url": "https://github.com/advisories/GHSA-83mx-573x-5rw9", "reference_id": "GHSA-83mx-573x-5rw9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-83mx-573x-5rw9" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1024", "reference_id": "RHSA-2021:1024", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1024" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1063", "reference_id": "RHSA-2021:1063", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1063" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1131", "reference_id": "RHSA-2021:1131", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1131" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1189", "reference_id": "RHSA-2021:1189", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1189" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1195", "reference_id": "RHSA-2021:1195", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1195" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1196", "reference_id": "RHSA-2021:1196", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1196" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1199", "reference_id": "RHSA-2021:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1200", "reference_id": "RHSA-2021:1200", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1200" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1202", "reference_id": "RHSA-2021:1202", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1203", "reference_id": "RHSA-2021:1203", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1203" }, { "reference_url": "https://usn.ubuntu.com/4891-1/", "reference_id": "USN-4891-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4891-1/" }, { "reference_url": "https://usn.ubuntu.com/5038-1/", "reference_id": "USN-5038-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5038-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-3449", "GHSA-83mx-573x-5rw9" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-249a-9kqa-p7an" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97100?format=api", "vulnerability_id": "VCID-2gwr-hz4v-3ua5", "summary": "Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94205", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94213", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94212", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127498", "reference_id": "1127498", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127498" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0197", "reference_id": "RHSA-2015:0197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0197" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3509" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2gwr-hz4v-3ua5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/369669?format=api", "vulnerability_id": "VCID-2qj9-rneb-tug9", "summary": "regression update", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" } ], "aliases": [ "DSA-3673-2 openssl" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2qj9-rneb-tug9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/74486?format=api", "vulnerability_id": "VCID-2x2e-84kd-9qh5", "summary": "openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9230.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9230.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-9230", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.12717", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.12751", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00041", "scoring_system": "epss", "scoring_elements": "0.12755", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-9230" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9230" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20250930.txt", "reference_id": "20250930.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://openssl-library.org/news/secadv/20250930.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396054", "reference_id": "2396054", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2396054" }, { "reference_url": "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45", "reference_id": "5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45" }, { "reference_url": "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280", "reference_id": "9e91358f365dee6c446dcdcdb01c04d2743fd280", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280" }, { "reference_url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "reference_id": "a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def" }, { "reference_url": "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd", "reference_id": "b5282d677551afda7d20e9c00e09561b547b2dfd", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd" }, { "reference_url": "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482", "reference_id": "bae259a211ada6315dc50900686daaaaaa55f482", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3", "reference_id": "c2b96348bfa662f25f4fabf81958ae822063dae3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba", "reference_id": "dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-30T19:30:08Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21174", "reference_id": "RHSA-2025:21174", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21174" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21248", "reference_id": "RHSA-2025:21248", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21248" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21255", "reference_id": "RHSA-2025:21255", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21255" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21562", "reference_id": "RHSA-2025:21562", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21562" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:21994", "reference_id": "RHSA-2025:21994", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:21994" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22428", "reference_id": "RHSA-2025:22428", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22428" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22529", "reference_id": "RHSA-2025:22529", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22529" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22548", "reference_id": "RHSA-2025:22548", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22548" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22794", "reference_id": "RHSA-2025:22794", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22794" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:22868", "reference_id": "RHSA-2025:22868", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:22868" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23078", "reference_id": "RHSA-2025:23078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23079", "reference_id": "RHSA-2025:23079", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23079" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23080", "reference_id": "RHSA-2025:23080", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23080" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23202", "reference_id": "RHSA-2025:23202", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23204", "reference_id": "RHSA-2025:23204", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23204" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23205", "reference_id": "RHSA-2025:23205", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23205" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23209", "reference_id": "RHSA-2025:23209", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23209" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23449", "reference_id": "RHSA-2025:23449", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:23449" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0332", "reference_id": "RHSA-2026:0332", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0332" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0337", "reference_id": "RHSA-2026:0337", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0337" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0420", "reference_id": "RHSA-2026:0420", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0420" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0602", "reference_id": "RHSA-2026:0602", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0602" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0674", "reference_id": "RHSA-2026:0674", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0674" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0702", "reference_id": "RHSA-2026:0702", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0702" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0714", "reference_id": "RHSA-2026:0714", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0714" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0794", "reference_id": "RHSA-2026:0794", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0794" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0887", "reference_id": "RHSA-2026:0887", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0887" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1349", "reference_id": "RHSA-2026:1349", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1349" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1475", "reference_id": "RHSA-2026:1475", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1475" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1652", "reference_id": "RHSA-2026:1652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1720", "reference_id": "RHSA-2026:1720", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1720" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:18320", "reference_id": "RHSA-2026:18320", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:18320" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2771", "reference_id": "RHSA-2026:2771", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2771" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2776", "reference_id": "RHSA-2026:2776", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2776" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2974", "reference_id": "RHSA-2026:2974", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2974" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2994", "reference_id": "RHSA-2026:2994", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2994" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2995", "reference_id": "RHSA-2026:2995", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2995" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3164", "reference_id": "RHSA-2026:3164", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3164" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3415", "reference_id": "RHSA-2026:3415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3461", "reference_id": "RHSA-2026:3461", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3461" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3462", "reference_id": "RHSA-2026:3462", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3462" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3861", "reference_id": "RHSA-2026:3861", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3861" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7786-1/", "reference_id": "USN-7786-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7786-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-9230" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2x2e-84kd-9qh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97033?format=api", "vulnerability_id": "VCID-3ays-4s4x-m3hu", "summary": "The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain \"skeleton key\" values, which might allow context-dependent attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values. NOTE: this is a preliminary CVE for Dual_EC_DRBG; future research may provide additional details about point Q and associated attacks, and could potentially lead to a RECAST or REJECT of this CVE.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6755.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2007-6755", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0033", "scoring_system": "epss", "scoring_elements": "0.56242", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0033", "scoring_system": "epss", "scoring_elements": "0.56297", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0033", "scoring_system": "epss", "scoring_elements": "0.56303", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0033", "scoring_system": "epss", "scoring_elements": "0.5629", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2007-6755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6755" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1046045", "reference_id": "1046045", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1046045" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2007-6755" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3ays-4s4x-m3hu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44777?format=api", "vulnerability_id": "VCID-3g6n-ujyv-jub3", "summary": "Improper Certificate Validation\nApplications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that certificate. A malicious CA could use this to deliberately assert invalid certificate policies in order to circumvent policy checking on the certificate altogether. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0465.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0465.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0465", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00536", "scoring_system": "epss", "scoring_elements": "0.67812", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00536", "scoring_system": "epss", "scoring_elements": "0.67848", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00536", "scoring_system": "epss", "scoring_elements": "0.67852", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00536", "scoring_system": "epss", "scoring_elements": "0.67859", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0465" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=10325176f3d3e98c6e2b3bf5ab1e3b334de6947a" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1dd43e0709fece299b15208f36cc7c76209ba0bb" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=b013765abfa80036dc779dd0e50602c57bb3bf95" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=facfb1ab745646e97a1920977ae4a9965ea61d5c" }, { "reference_url": "https://www.openssl.org/news/secadv/20230328.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://www.openssl.org/news/secadv/20230328.txt" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720", "reference_id": "1034720", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2182561", "reference_id": "2182561", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2182561" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0465", "reference_id": "CVE-2023-0465", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0465" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230414-0001/", "reference_id": "ntap-20230414-0001", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-18T20:12:09Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230414-0001/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3722", "reference_id": "RHSA-2023:3722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-0465" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3g6n-ujyv-jub3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3322?format=api", "vulnerability_id": "VCID-3pke-7yer-87hz", "summary": "arbitrary command execution", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2068.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2068.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2068", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.20216", "scoring_system": "epss", "scoring_elements": "0.95631", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.20216", "scoring_system": "epss", "scoring_elements": "0.95621", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.20216", "scoring_system": "epss", "scoring_elements": "0.95627", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.20216", "scoring_system": "epss", "scoring_elements": "0.95633", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2068" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2068" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7" }, { "reference_url": "https://www.debian.org/security/2022/dsa-5169", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://www.debian.org/security/2022/dsa-5169" }, { "reference_url": "https://www.openssl.org/news/secadv/20220621.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://www.openssl.org/news/secadv/20220621.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310", "reference_id": "2097310", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2097310" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/", "reference_id": "6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/" }, { "reference_url": "https://security.archlinux.org/AVG-2765", "reference_id": "AVG-2765", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2765" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2068", "reference_id": "CVE-2022-2068", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2068" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220707-0008/", "reference_id": "ntap-20220707-0008", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20220707-0008/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5818", "reference_id": "RHSA-2022:5818", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5818" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6224", "reference_id": "RHSA-2022:6224", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6224" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8840", "reference_id": "RHSA-2022:8840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8840" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8841", "reference_id": "RHSA-2022:8841", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8841" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8913", "reference_id": "RHSA-2022:8913", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8913" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8917", "reference_id": "RHSA-2022:8917", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8917" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5931", "reference_id": "RHSA-2023:5931", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5931" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5979", "reference_id": "RHSA-2023:5979", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5979" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5980", "reference_id": "RHSA-2023:5980", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5980" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5982", "reference_id": "RHSA-2023:5982", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5982" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6818", "reference_id": "RHSA-2023:6818", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6818" }, { "reference_url": "https://usn.ubuntu.com/5488-1/", "reference_id": "USN-5488-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5488-1/" }, { "reference_url": "https://usn.ubuntu.com/5488-2/", "reference_id": "USN-5488-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5488-2/" }, { "reference_url": "https://usn.ubuntu.com/6457-1/", "reference_id": "USN-6457-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6457-1/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/", "reference_id": "VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:34Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" }, { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2022-2068" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3pke-7yer-87hz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6782?format=api", "vulnerability_id": "VCID-4197-62g5-8ka3", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2181.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.24266", "scoring_system": "epss", "scoring_elements": "0.96194", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.24266", "scoring_system": "epss", "scoring_elements": "0.96199", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.24266", "scoring_system": "epss", "scoring_elements": "0.96201", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369113", "reference_id": "1369113", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369113" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2181" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4197-62g5-8ka3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97158?format=api", "vulnerability_id": "VCID-41jv-azph-dyat", "summary": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97583", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97588", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.9759", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97589", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1312219", "reference_id": "1312219", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1312219" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0799" ], "risk_score": 0.7, "exploitability": "0.5", "weighted_severity": "1.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-41jv-azph-dyat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6786?format=api", "vulnerability_id": "VCID-448b-h78v-wfes", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2177.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.24015", "scoring_system": "epss", "scoring_elements": "0.96147", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.24015", "scoring_system": "epss", "scoring_elements": "0.9615", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.24015", "scoring_system": "epss", "scoring_elements": "0.96142", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:P/A:P" }, { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705", "reference_id": "1341705", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1341705" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0193", "reference_id": "RHSA-2017:0193", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0193" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0194", "reference_id": "RHSA-2017:0194", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0194" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1658", "reference_id": "RHSA-2017:1658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1659", "reference_id": "RHSA-2017:1659", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1659" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2177" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-448b-h78v-wfes" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6654?format=api", "vulnerability_id": "VCID-4pe4-89ss-57am", "summary": "denial of service", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7054.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7054", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.24759", "scoring_system": "epss", "scoring_elements": "0.9625", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.24759", "scoring_system": "epss", "scoring_elements": "0.96255", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.24759", "scoring_system": "epss", "scoring_elements": "0.96257", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7054" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7054" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393920", "reference_id": "1393920", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393920" }, { "reference_url": "https://security.archlinux.org/AVG-143", "reference_id": "AVG-143", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-143" }, { "reference_url": "https://security.archlinux.org/AVG-144", "reference_id": "AVG-144", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-144" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/40899.py", "reference_id": "CVE-2016-7054", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/40899.py" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2016-7054" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4pe4-89ss-57am" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6777?format=api", "vulnerability_id": "VCID-4wy2-zsz2-a3ew", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6304.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.28075", "scoring_system": "epss", "scoring_elements": "0.96569", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.28075", "scoring_system": "epss", "scoring_elements": "0.96575", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.28075", "scoring_system": "epss", "scoring_elements": "0.96566", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.28075", "scoring_system": "epss", "scoring_elements": "0.96574", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600", "reference_id": "1377600", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2802", "reference_id": "RHSA-2016:2802", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2802" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1413", "reference_id": "RHSA-2017:1413", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1413" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1414", "reference_id": "RHSA-2017:1414", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1414" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1415", "reference_id": "RHSA-2017:1415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1658", "reference_id": "RHSA-2017:1658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1659", "reference_id": "RHSA-2017:1659", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1659" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-6304" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4wy2-zsz2-a3ew" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97180?format=api", "vulnerability_id": "VCID-59pf-e59c-ayfd", "summary": "While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3735.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3735", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.3862", "scoring_system": "epss", "scoring_elements": "0.97336", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.3862", "scoring_system": "epss", "scoring_elements": "0.9733", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.3862", "scoring_system": "epss", "scoring_elements": "0.97335", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:P/A:N" }, { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1486144", "reference_id": "1486144", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1486144" }, { "reference_url": "https://security.archlinux.org/ASA-201711-14", "reference_id": "ASA-201711-14", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201711-14" }, { "reference_url": "https://security.archlinux.org/ASA-201711-15", "reference_id": "ASA-201711-15", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201711-15" }, { "reference_url": "https://security.archlinux.org/AVG-477", "reference_id": "AVG-477", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-477" }, { "reference_url": "https://security.archlinux.org/AVG-478", "reference_id": "AVG-478", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-478" }, { "reference_url": "https://security.gentoo.org/glsa/201712-03", "reference_id": "GLSA-201712-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201712-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3221", "reference_id": "RHSA-2018:3221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3221" }, { "reference_url": "https://usn.ubuntu.com/3475-1/", "reference_id": "USN-3475-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3475-1/" }, { "reference_url": "https://usn.ubuntu.com/3611-2/", "reference_id": "USN-3611-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3611-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3735" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-59pf-e59c-ayfd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42211?format=api", "vulnerability_id": "VCID-5a2a-trbk-fkfg", "summary": "Carry Propagation bug\nThere is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH private key among multiple clients, which is no longer an option since CVE-2016-0701.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4160.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-4160.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-4160", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00417", "scoring_system": "epss", "scoring_elements": "0.62091", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00417", "scoring_system": "epss", "scoring_elements": "0.62136", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00417", "scoring_system": "epss", "scoring_elements": "0.6214", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00417", "scoring_system": "epss", "scoring_elements": "0.62147", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-4160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3bf7b73ea7123045b8f972badc67ed6878e6c37f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3bf7b73ea7123045b8f972badc67ed6878e6c37f" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6fc1aaaf303185aa5e483e06bdfae16daa9193a7", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6fc1aaaf303185aa5e483e06bdfae16daa9193a7" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb" }, { "reference_url": "https://www.openssl.org/news/secadv/20220128.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T15:29:13Z/" } ], "url": "https://www.openssl.org/news/secadv/20220128.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048651", "reference_id": "2048651", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048651" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4160", "reference_id": "CVE-2021-4160", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4160" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T15:29:13Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T15:29:13Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T15:29:13Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-24T15:29:13Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-4160" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5a2a-trbk-fkfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68067?format=api", "vulnerability_id": "VCID-5hck-s1fh-k3gf", "summary": "openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68160.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68160.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68160", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13158", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13195", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13198", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-68160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68160" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380", "reference_id": "2430380", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430380" }, { "reference_url": "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad", "reference_id": "384011202af92605d926fafe4a0bcd6b65d162ad", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://github.com/openssl/openssl/commit/384011202af92605d926fafe4a0bcd6b65d162ad" }, { "reference_url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "reference_id": "475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://github.com/openssl/openssl/commit/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6" }, { "reference_url": "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c", "reference_id": "4c96fbba618e1940f038012506ee9e21d32ee12c", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://github.com/openssl/openssl/commit/4c96fbba618e1940f038012506ee9e21d32ee12c" }, { "reference_url": "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0", "reference_id": "6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://github.com/openssl/openssl/commit/6845c3b6460a98b1ec4e463baa2ea1a63a32d7c0" }, { "reference_url": "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096", "reference_id": "68a7cd2e2816c3a02f4d45a2ce43fc04fac97096", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:04:54Z/" } ], "url": "https://github.com/openssl/openssl/commit/68a7cd2e2816c3a02f4d45a2ce43fc04fac97096" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-68160" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5hck-s1fh-k3gf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46343?format=api", "vulnerability_id": "VCID-5rhg-tvzd-h7es", "summary": "Improper Check for Unusual or Exceptional Conditions\nIssue summary: Generating excessively long X9.42 DH keys or checking\nexcessively long X9.42 DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_generate_key() to\ngenerate an X9.42 DH key may experience long delays. Likewise, applications\nthat use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check()\nto check an X9.42 DH key or X9.42 DH parameters may experience long delays.\nWhere the key or parameters that are being checked have been obtained from\nan untrusted source this may lead to a Denial of Service.\n\nWhile DH_check() performs all the necessary checks (as of CVE-2023-3817),\nDH_check_pub_key() does not make any of these checks, and is therefore\nvulnerable for excessively large P and Q parameters.\n\nLikewise, while DH_generate_key() performs a check for an excessively large\nP, it does not check for an excessively large Q.\n\nAn application that calls DH_generate_key() or DH_check_pub_key() and\nsupplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nDH_generate_key() and DH_check_pub_key() are also called by a number of\nother OpenSSL functions. An application calling any of those other\nfunctions may similarly be affected. The other functions affected by this\nare DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate().\n\nAlso vulnerable are the OpenSSL pkey command line application when using the\n\"-pubcheck\" option, as well as the OpenSSL genpkey command line application.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5678.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5678.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5678", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00537", "scoring_system": "epss", "scoring_elements": "0.6788", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00537", "scoring_system": "epss", "scoring_elements": "0.67883", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00537", "scoring_system": "epss", "scoring_elements": "0.6789", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-5678" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5678" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T19:42:37Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T19:42:37Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T19:42:37Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T19:42:37Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6" }, { "reference_url": "https://www.openssl.org/news/secadv/20231106.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T19:42:37Z/" } ], "url": "https://www.openssl.org/news/secadv/20231106.txt" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055473", "reference_id": "1055473", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1055473" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248616", "reference_id": "2248616", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2248616" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678", "reference_id": "CVE-2023-5678", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5678" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7877", "reference_id": "RHSA-2023:7877", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7877" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0154", "reference_id": "RHSA-2024:0154", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0154" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0208", "reference_id": "RHSA-2024:0208", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0208" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1316", "reference_id": "RHSA-2024:1316", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1316" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1317", "reference_id": "RHSA-2024:1317", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1317" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1318", "reference_id": "RHSA-2024:1318", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1318" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1319", "reference_id": "RHSA-2024:1319", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1319" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1325", "reference_id": "RHSA-2024:1325", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1325" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2447", "reference_id": "RHSA-2024:2447", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2447" }, { "reference_url": "https://usn.ubuntu.com/6622-1/", "reference_id": "USN-6622-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6622-1/" }, { "reference_url": "https://usn.ubuntu.com/6632-1/", "reference_id": "USN-6632-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6632-1/" }, { "reference_url": "https://usn.ubuntu.com/6709-1/", "reference_id": "USN-6709-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6709-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2023-5678" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5rhg-tvzd-h7es" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90680?format=api", "vulnerability_id": "VCID-5uat-sz2c-r3gb", "summary": "openssl: Unbounded memory growth with session handling in TLSv1.3", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2511.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-2511.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-2511", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08833", "scoring_system": "epss", "scoring_elements": "0.92686", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.08833", "scoring_system": "epss", "scoring_elements": "0.92694", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08833", "scoring_system": "epss", "scoring_elements": "0.9269", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-2511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2511" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068658", "reference_id": "1068658", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068658" }, { "reference_url": "https://www.openssl.org/news/secadv/20240408.txt", "reference_id": "20240408.txt", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-09T15:14:41Z/" } ], "url": "https://www.openssl.org/news/secadv/20240408.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274020", "reference_id": "2274020", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2274020" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640", "reference_id": "5f8d25770ae6437db119dfc951e207271a326640", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-09T15:14:41Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/5f8d25770ae6437db119dfc951e207271a326640" }, { "reference_url": "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce", "reference_id": "7e4d731b1c07201ad9374c1cd9ac5263bdf35bce", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-09T15:14:41Z/" } ], "url": "https://github.com/openssl/openssl/commit/7e4d731b1c07201ad9374c1cd9ac5263bdf35bce" }, { "reference_url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "reference_id": "b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-09T15:14:41Z/" } ], "url": "https://github.com/openssl/openssl/commit/b52867a9f618bb955bed2a3ce3db4d4f97ed8e5d" }, { "reference_url": "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08", "reference_id": "e9d7083e241670332e0443da0f0d4ffb52829f08", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-09T15:14:41Z/" } ], "url": "https://github.com/openssl/openssl/commit/e9d7083e241670332e0443da0f0d4ffb52829f08" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9333", "reference_id": "RHSA-2024:9333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9333" }, { "reference_url": "https://usn.ubuntu.com/6937-1/", "reference_id": "USN-6937-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6937-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-2511" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5uat-sz2c-r3gb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97166?format=api", "vulnerability_id": "VCID-6ckn-3rv4-abhh", "summary": "The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98066", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98068", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98067", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2842" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314757", "reference_id": "1314757", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314757" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2842" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6ckn-3rv4-abhh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97183?format=api", "vulnerability_id": "VCID-6csp-ek5k-efet", "summary": "There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH1024 are considered just feasible, because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH1024 private key among multiple clients, which is no longer an option since CVE-2016-0701. This only affects processors that support the AVX2 but not ADX extensions like Intel Haswell (4th generation). Note: The impact from this issue is similar to CVE-2017-3736, CVE-2017-3732 and CVE-2015-3193. OpenSSL version 1.0.2-1.0.2m and 1.1.0-1.1.0g are affected. Fixed in OpenSSL 1.0.2n. Due to the low severity of this issue we are not issuing a new release of OpenSSL 1.1.0 at this time. The fix will be included in OpenSSL 1.1.0h when it becomes available. The fix is also available in commit e502cc86d in the OpenSSL git repository.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3738.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3738", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.15507", "scoring_system": "epss", "scoring_elements": "0.94805", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.15507", "scoring_system": "epss", "scoring_elements": "0.94794", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.15507", "scoring_system": "epss", "scoring_elements": "0.94803", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.15507", "scoring_system": "epss", "scoring_elements": "0.94804", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3738" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:N/A:N" }, { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510", "reference_id": "1523510", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523510" }, { "reference_url": "https://security.archlinux.org/ASA-201804-2", "reference_id": "ASA-201804-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201804-2" }, { "reference_url": "https://security.archlinux.org/ASA-201804-6", "reference_id": "ASA-201804-6", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201804-6" }, { "reference_url": "https://security.archlinux.org/AVG-540", "reference_id": "AVG-540", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-540" }, { "reference_url": "https://security.archlinux.org/AVG-551", "reference_id": "AVG-551", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-551" }, { "reference_url": "https://security.gentoo.org/glsa/201712-03", "reference_id": "GLSA-201712-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201712-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0998", "reference_id": "RHSA-2018:0998", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:0998" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3512-1/", "reference_id": "USN-3512-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3512-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3738" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6csp-ek5k-efet" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97197?format=api", "vulnerability_id": "VCID-6xfg-3n5d-pbcv", "summary": "In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMS_decrypt or PKCS7_decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1563.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1563", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01121", "scoring_system": "epss", "scoring_elements": "0.78583", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01121", "scoring_system": "epss", "scoring_elements": "0.7861", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01121", "scoring_system": "epss", "scoring_elements": "0.78618", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01121", "scoring_system": "epss", "scoring_elements": "0.78609", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1563" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1547", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1547" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1563", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1563" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752100", "reference_id": "1752100", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752100" }, { "reference_url": "https://security.gentoo.org/glsa/201911-04", "reference_id": "GLSA-201911-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201911-04" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336", "reference_id": "RHSA-2020:1336", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1336" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337", "reference_id": "RHSA-2020:1337", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1337" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1840", "reference_id": "RHSA-2020:1840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1840" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2019-1563" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6xfg-3n5d-pbcv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58686?format=api", "vulnerability_id": "VCID-76r1-sn8n-97cp", "summary": "The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4929.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4929", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08487", "scoring_system": "epss", "scoring_elements": "0.9251", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08487", "scoring_system": "epss", "scoring_elements": "0.92523", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08487", "scoring_system": "epss", "scoring_elements": "0.92518", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08487", "scoring_system": "epss", "scoring_elements": "0.92514", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4929" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4929" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689936", "reference_id": "689936", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=689936" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700399", "reference_id": "700399", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700399" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700426", "reference_id": "700426", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700426" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=727197", "reference_id": "727197", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=727197" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728055", "reference_id": "728055", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=728055" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=857051", "reference_id": "857051", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=857051" }, { "reference_url": "https://security.gentoo.org/glsa/201309-12", "reference_id": "GLSA-201309-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201309-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0587", "reference_id": "RHSA-2013:0587", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0587" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0636", "reference_id": "RHSA-2013:0636", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0636" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://usn.ubuntu.com/1627-1/", "reference_id": "USN-1627-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1627-1/" }, { "reference_url": "https://usn.ubuntu.com/1628-1/", "reference_id": "USN-1628-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1628-1/" }, { "reference_url": "https://usn.ubuntu.com/1898-1/", "reference_id": "USN-1898-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1898-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2012-4929" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-76r1-sn8n-97cp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97181?format=api", "vulnerability_id": "VCID-77sy-m4qw-dubh", "summary": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. This only affects processors that support the BMI1, BMI2 and ADX extensions like Intel Broadwell (5th generation) and later or AMD Ryzen.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3736.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3736", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08287", "scoring_system": "epss", "scoring_elements": "0.92396", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.08287", "scoring_system": "epss", "scoring_elements": "0.92392", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08287", "scoring_system": "epss", "scoring_elements": "0.92405", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08287", "scoring_system": "epss", "scoring_elements": "0.92401", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3736" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:C/A:N" }, { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169", "reference_id": "1509169", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1509169" }, { "reference_url": "https://security.archlinux.org/ASA-201711-14", "reference_id": "ASA-201711-14", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201711-14" }, { "reference_url": "https://security.archlinux.org/ASA-201711-15", "reference_id": "ASA-201711-15", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201711-15" }, { "reference_url": "https://security.archlinux.org/AVG-477", "reference_id": "AVG-477", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-477" }, { "reference_url": "https://security.archlinux.org/AVG-478", "reference_id": "AVG-478", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-478" }, { "reference_url": "https://security.gentoo.org/glsa/201712-03", "reference_id": "GLSA-201712-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201712-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0998", "reference_id": "RHSA-2018:0998", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:0998" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2568", "reference_id": "RHSA-2018:2568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2568" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2575", "reference_id": "RHSA-2018:2575", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2575" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2713", "reference_id": "RHSA-2018:2713", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2713" }, { "reference_url": "https://usn.ubuntu.com/3475-1/", "reference_id": "USN-3475-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3475-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3736" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77sy-m4qw-dubh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97112?format=api", "vulnerability_id": "VCID-77vh-npap-5fam", "summary": "The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97062", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97065", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97067", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97069", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-5139" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127491", "reference_id": "1127491", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127491" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-5139" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77vh-npap-5fam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97161?format=api", "vulnerability_id": "VCID-7a92-nbqm-2fgb", "summary": "The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2107.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.79963", "scoring_system": "epss", "scoring_elements": "0.9913", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.79963", "scoring_system": "epss", "scoring_elements": "0.99132", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.79963", "scoring_system": "epss", "scoring_elements": "0.99131", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:C/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331426", "reference_id": "1331426", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331426" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/39768.txt", "reference_id": "CVE-2016-2107", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/39768.txt" }, { "reference_url": "http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html", "reference_id": "CVE-2016-2107", "reference_type": "exploit", "scores": [], "url": "http://web-in-security.blogspot.ca/2016/05/curious-padding-oracle-in-openssl-cve.html" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2959-1/", "reference_id": "USN-2959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2107" ], "risk_score": 7.0, "exploitability": "2.0", "weighted_severity": "3.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7a92-nbqm-2fgb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68069?format=api", "vulnerability_id": "VCID-7abj-3zsb-bfep", "summary": "openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69419.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69419.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69419", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.29837", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.29907", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.2987", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69419" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69419" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386", "reference_id": "2430386", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430386" }, { "reference_url": "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296", "reference_id": "41be0f216404f14457bbf3b9cc488dba60b49296", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://github.com/openssl/openssl/commit/41be0f216404f14457bbf3b9cc488dba60b49296" }, { "reference_url": "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb", "reference_id": "7e9cac9832e4705b91987c2474ed06a37a93cecb", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://github.com/openssl/openssl/commit/7e9cac9832e4705b91987c2474ed06a37a93cecb" }, { "reference_url": "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2", "reference_id": "a26a90d38edec3748566129d824e664b54bee2e2", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://github.com/openssl/openssl/commit/a26a90d38edec3748566129d824e664b54bee2e2" }, { "reference_url": "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015", "reference_id": "cda12de3bc0e333ea8d2c6fd15001dbdaf280015", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://github.com/openssl/openssl/commit/cda12de3bc0e333ea8d2c6fd15001dbdaf280015" }, { "reference_url": "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535", "reference_id": "ff628933755075446bca8307e8417c14d164b535", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-29T15:09:04Z/" } ], "url": "https://github.com/openssl/openssl/commit/ff628933755075446bca8307e8417c14d164b535" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:14773", "reference_id": "RHSA-2026:14773", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:14773" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1496", "reference_id": "RHSA-2026:1496", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1496" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1503", "reference_id": "RHSA-2026:1503", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1503" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:15087", "reference_id": "RHSA-2026:15087", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:15087" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1519", "reference_id": "RHSA-2026:1519", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1519" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1594", "reference_id": "RHSA-2026:1594", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1594" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1733", "reference_id": "RHSA-2026:1733", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1733" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:19187", "reference_id": "RHSA-2026:19187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:19187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2994", "reference_id": "RHSA-2026:2994", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2994" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2995", "reference_id": "RHSA-2026:2995", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2995" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3042", "reference_id": "RHSA-2026:3042", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3042" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3364", "reference_id": "RHSA-2026:3364", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3364" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3437", "reference_id": "RHSA-2026:3437", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3861", "reference_id": "RHSA-2026:3861", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3861" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4163", "reference_id": "RHSA-2026:4163", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4163" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4214", "reference_id": "RHSA-2026:4214", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4214" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4472", "reference_id": "RHSA-2026:4472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4824", "reference_id": "RHSA-2026:4824", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4824" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4825", "reference_id": "RHSA-2026:4825", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4825" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5214", "reference_id": "RHSA-2026:5214", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5214" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5217", "reference_id": "RHSA-2026:5217", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5217" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:5873", "reference_id": "RHSA-2026:5873", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:5873" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7239", "reference_id": "RHSA-2026:7239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-69419" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7abj-3zsb-bfep" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97182?format=api", "vulnerability_id": "VCID-7fhc-ke81-p3cn", "summary": "OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an \"error state\" mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error state and would immediately fail if you attempted to continue the handshake. This works as designed for the explicit handshake functions (SSL_do_handshake(), SSL_accept() and SSL_connect()), however due to a bug it does not work correctly if SSL_read() or SSL_write() is called directly. In that scenario, if the handshake fails then a fatal error will be returned in the initial function call. If SSL_read()/SSL_write() is subsequently called by the application for the same SSL object then it will succeed and the data is passed without being decrypted/encrypted directly from the SSL/TLS record layer. In order to exploit this issue an application bug would have to be present that resulted in a call to SSL_read()/SSL_write() being issued after having already received a fatal error. OpenSSL version 1.0.2b-1.0.2m are affected. Fixed in OpenSSL 1.0.2n. OpenSSL 1.1.0 is not affected.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3737.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3737", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.42931", "scoring_system": "epss", "scoring_elements": "0.97561", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.42931", "scoring_system": "epss", "scoring_elements": "0.97555", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.42931", "scoring_system": "epss", "scoring_elements": "0.9756", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.42931", "scoring_system": "epss", "scoring_elements": "0.97562", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3738" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:N/A:N" }, { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504", "reference_id": "1523504", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1523504" }, { "reference_url": "https://security.archlinux.org/AVG-548", "reference_id": "AVG-548", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-548" }, { "reference_url": "https://security.archlinux.org/AVG-549", "reference_id": "AVG-549", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-549" }, { "reference_url": "https://security.gentoo.org/glsa/201712-03", "reference_id": "GLSA-201712-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201712-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0998", "reference_id": "RHSA-2018:0998", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:0998" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3512-1/", "reference_id": "USN-3512-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3512-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3737" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7fhc-ke81-p3cn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2931?format=api", "vulnerability_id": "VCID-7gkv-pu79-43hx", "summary": "Security researcher Matthew Green reported a Diffie–Hellman\n(DHE) key processing issue in Network Security Services (NSS) where a\nman-in-the-middle (MITM) attacker can force a server to downgrade TLS\nconnections to 512-bit export-grade cryptography by modifying client\nrequests to include only export-grade cipher suites. The resulting\nweak key can then be leveraged to impersonate the server. This attack\nis detailed in the \"Imperfect Forward\nSecrecy: How Diffie-Hellman Fails in Practice\" paper and is known as the\n\"Logjam Attack.\"This issue was fixed in NSS version 3.19.1 by limiting the lower strength of\nsupported DHE keys to use 1023 bit primes.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4000", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.92346", "scoring_system": "epss", "scoring_elements": "0.99739", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.92346", "scoring_system": "epss", "scoring_elements": "0.9974", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4000" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:C/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.securitytracker.com/id/1032474", "reference_id": "1032474", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032474" }, { "reference_url": "http://www.securitytracker.com/id/1032475", "reference_id": "1032475", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032475" }, { "reference_url": "http://www.securitytracker.com/id/1032476", "reference_id": "1032476", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032476" }, { "reference_url": "http://www.securitytracker.com/id/1032637", "reference_id": "1032637", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032637" }, { "reference_url": "http://www.securitytracker.com/id/1032645", "reference_id": "1032645", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032645" }, { "reference_url": "http://www.securitytracker.com/id/1032647", "reference_id": "1032647", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032647" }, { "reference_url": "http://www.securitytracker.com/id/1032648", "reference_id": "1032648", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032648" }, { "reference_url": "http://www.securitytracker.com/id/1032649", "reference_id": "1032649", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032649" }, { "reference_url": "http://www.securitytracker.com/id/1032650", "reference_id": "1032650", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032650" }, { "reference_url": "http://www.securitytracker.com/id/1032651", "reference_id": "1032651", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032651" }, { "reference_url": "http://www.securitytracker.com/id/1032652", "reference_id": "1032652", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032652" }, { "reference_url": "http://www.securitytracker.com/id/1032653", "reference_id": "1032653", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032653" }, { "reference_url": "http://www.securitytracker.com/id/1032654", "reference_id": "1032654", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032654" }, { "reference_url": "http://www.securitytracker.com/id/1032655", "reference_id": "1032655", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032655" }, { "reference_url": "http://www.securitytracker.com/id/1032656", "reference_id": "1032656", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032656" }, { "reference_url": "http://www.securitytracker.com/id/1032688", "reference_id": "1032688", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032688" }, { "reference_url": "http://www.securitytracker.com/id/1032699", "reference_id": "1032699", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032699" }, { "reference_url": "http://www.securitytracker.com/id/1032702", "reference_id": "1032702", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032702" }, { "reference_url": "http://www.securitytracker.com/id/1032727", "reference_id": "1032727", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032727" }, { "reference_url": "http://www.securitytracker.com/id/1032759", "reference_id": "1032759", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032759" }, { "reference_url": "http://www.securitytracker.com/id/1032777", "reference_id": "1032777", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032777" }, { "reference_url": "http://www.securitytracker.com/id/1032778", "reference_id": "1032778", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032778" }, { "reference_url": "http://www.securitytracker.com/id/1032783", "reference_id": "1032783", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032783" }, { "reference_url": "http://www.securitytracker.com/id/1032784", "reference_id": "1032784", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032784" }, { "reference_url": "http://www.securitytracker.com/id/1032856", "reference_id": "1032856", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032856" }, { "reference_url": "http://www.securitytracker.com/id/1032864", "reference_id": "1032864", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032864" }, { "reference_url": "http://www.securitytracker.com/id/1032865", "reference_id": "1032865", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032865" }, { "reference_url": "http://www.securitytracker.com/id/1032871", "reference_id": "1032871", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032871" }, { "reference_url": "http://www.securitytracker.com/id/1032884", "reference_id": "1032884", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032884" }, { "reference_url": "http://www.securitytracker.com/id/1032910", "reference_id": "1032910", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032910" }, { "reference_url": "http://www.securitytracker.com/id/1032932", "reference_id": "1032932", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032932" }, { "reference_url": "http://www.securitytracker.com/id/1032960", "reference_id": "1032960", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032960" }, { "reference_url": "http://www.securitytracker.com/id/1033019", "reference_id": "1033019", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033019" }, { "reference_url": "http://www.securitytracker.com/id/1033064", "reference_id": "1033064", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033064" }, { "reference_url": "http://www.securitytracker.com/id/1033065", "reference_id": "1033065", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033065" }, { "reference_url": "http://www.securitytracker.com/id/1033067", "reference_id": "1033067", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033067" }, { "reference_url": "http://www.securitytracker.com/id/1033208", "reference_id": "1033208", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033208" }, { "reference_url": "http://www.securitytracker.com/id/1033209", "reference_id": "1033209", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033209" }, { "reference_url": "http://www.securitytracker.com/id/1033210", "reference_id": "1033210", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033210" }, { "reference_url": "http://www.securitytracker.com/id/1033222", "reference_id": "1033222", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033222" }, { "reference_url": "http://www.securitytracker.com/id/1033341", "reference_id": "1033341", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033341" }, { "reference_url": "http://www.securitytracker.com/id/1033385", "reference_id": "1033385", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033385" }, { "reference_url": "http://www.securitytracker.com/id/1033416", "reference_id": "1033416", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033416" }, { "reference_url": "http://www.securitytracker.com/id/1033430", "reference_id": "1033430", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033430" }, { "reference_url": "http://www.securitytracker.com/id/1033433", "reference_id": "1033433", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033433" }, { "reference_url": "http://www.securitytracker.com/id/1033513", "reference_id": "1033513", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033513" }, { "reference_url": "http://www.securitytracker.com/id/1033760", "reference_id": "1033760", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033760" }, { "reference_url": "http://www.securitytracker.com/id/1033891", "reference_id": "1033891", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033891" }, { "reference_url": "http://www.securitytracker.com/id/1033991", "reference_id": "1033991", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033991" }, { "reference_url": "http://www.securitytracker.com/id/1034087", "reference_id": "1034087", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034087" }, { "reference_url": "http://www.securitytracker.com/id/1034728", "reference_id": "1034728", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034728" }, { "reference_url": "http://www.securitytracker.com/id/1034884", "reference_id": "1034884", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034884" }, { "reference_url": "http://www.securitytracker.com/id/1036218", "reference_id": "1036218", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1036218" }, { "reference_url": "http://www.securitytracker.com/id/1040630", "reference_id": "1040630", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1040630" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223211", "reference_id": "1223211", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223211" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html", "reference_id": "159314.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html", "reference_id": "159351.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html", "reference_id": "160117.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html" }, { "reference_url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack", "reference_id": "2015-05-20-logjam-attack", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack" }, { "reference_url": "https://openssl.org/news/secadv/20150611.txt", "reference_id": "20150611.txt", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://openssl.org/news/secadv/20150611.txt" }, { "reference_url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery", "reference_id": "2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery" }, { "reference_url": "http://www.securityfocus.com/bid/74733", "reference_id": "74733", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securityfocus.com/bid/74733" }, { "reference_url": "http://openwall.com/lists/oss-security/2015/05/20/8", "reference_id": "8", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://openwall.com/lists/oss-security/2015/05/20/8" }, { "reference_url": "http://www.securityfocus.com/bid/91787", "reference_id": "91787", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securityfocus.com/bid/91787" }, { "reference_url": "http://support.citrix.com/article/CTX201114", "reference_id": "CTX201114", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.citrix.com/article/CTX201114" }, { "reference_url": "https://support.citrix.com/article/CTX216642", "reference_id": "CTX216642", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://support.citrix.com/article/CTX216642" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000", "reference_id": "CVE-2015-4000", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000" }, { "reference_url": "https://puppet.com/security/cve/CVE-2015-4000", "reference_id": "CVE-2015-4000", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://puppet.com/security/cve/CVE-2015-4000" }, { "reference_url": "https://www.suse.com/security/cve/CVE-2015-4000.html", "reference_id": "CVE-2015-4000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.suse.com/security/cve/CVE-2015-4000.html" }, { "reference_url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196", "reference_id": "display?docId=emr_na-c04718196", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196" }, { "reference_url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402", "reference_id": "display?docId=emr_na-c04876402", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402" }, { "reference_url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778", "reference_id": "display?docId=emr_na-c04949778", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778" }, { "reference_url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us", "reference_id": "display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527", "reference_id": "docDisplay?docId=emr_na-c04740527", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140", "reference_id": "docDisplay?docId=emr_na-c04770140", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190", "reference_id": "docDisplay?docId=emr_na-c04772190", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119", "reference_id": "docDisplay?docId=emr_na-c04773119", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241", "reference_id": "docDisplay?docId=emr_na-c04773241", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246", "reference_id": "docDisplay?docId=emr_na-c04832246", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839", "reference_id": "docDisplay?docId=emr_na-c04918839", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929", "reference_id": "docDisplay?docId=emr_na-c04923929", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789", "reference_id": "docDisplay?docId=emr_na-c04926789", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655", "reference_id": "docDisplay?docId=emr_na-c04953655", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763", "reference_id": "docDisplay?docId=emr_na-c05045763", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722", "reference_id": "docDisplay?docId=emr_na-c05128722", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083", "reference_id": "docDisplay?docId=emr_na-c05193083", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083" }, { "reference_url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403", "reference_id": "docdisplay?lndocid=MIGR-5098403", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984", "reference_id": "docview.wss?uid=swg21958984", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111", "reference_id": "docview.wss?uid=swg21959111", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132", "reference_id": "docview.wss?uid=swg21959132", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195", "reference_id": "docview.wss?uid=swg21959195", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325", "reference_id": "docview.wss?uid=swg21959325", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453", "reference_id": "docview.wss?uid=swg21959453", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481", "reference_id": "docview.wss?uid=swg21959481", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517", "reference_id": "docview.wss?uid=swg21959517", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530", "reference_id": "docview.wss?uid=swg21959530", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539", "reference_id": "docview.wss?uid=swg21959539", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636", "reference_id": "docview.wss?uid=swg21959636", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636" }, { "reference_url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745", "reference_id": "docview.wss?uid=swg21959745", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812", "reference_id": "docview.wss?uid=swg21959812", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041", "reference_id": "docview.wss?uid=swg21960041", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191", "reference_id": "docview.wss?uid=swg21960191", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194", "reference_id": "docview.wss?uid=swg21960194", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380", "reference_id": "docview.wss?uid=swg21960380", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418", "reference_id": "docview.wss?uid=swg21960418", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717", "reference_id": "docview.wss?uid=swg21961717", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455", "reference_id": "docview.wss?uid=swg21962455", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739", "reference_id": "docview.wss?uid=swg21962739", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816", "reference_id": "docview.wss?uid=swg21962816", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893", "reference_id": "docview.wss?uid=swg21967893", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3287", "reference_id": "dsa-3287", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3287" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3300", "reference_id": "dsa-3300", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3300" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3316", "reference_id": "dsa-3316", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3316" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3324", "reference_id": "dsa-3324", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3324" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3339", "reference_id": "dsa-3339", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3339" }, { "reference_url": "http://www.debian.org/security/2016/dsa-3688", "reference_id": "dsa-3688", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2016/dsa-3688" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://security.gentoo.org/glsa/201512-10", "reference_id": "GLSA-201512-10", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201512-10" }, { "reference_url": "https://security.gentoo.org/glsa/201603-11", "reference_id": "GLSA-201603-11", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201603-11" }, { "reference_url": "https://security.gentoo.org/glsa/201605-06", "reference_id": "GLSA-201605-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201605-06" }, { "reference_url": "https://security.gentoo.org/glsa/201701-46", "reference_id": "GLSA-201701-46", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201701-46" }, { "reference_url": "http://support.apple.com/kb/HT204941", "reference_id": "HT204941", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.apple.com/kb/HT204941" }, { "reference_url": "http://support.apple.com/kb/HT204942", "reference_id": "HT204942", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.apple.com/kb/HT204942" }, { "reference_url": "https://weakdh.org/imperfect-forward-secrecy.pdf", "reference_id": "imperfect-forward-secrecy.pdf", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://weakdh.org/imperfect-forward-secrecy.pdf" }, { "reference_url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681", "reference_id": "index?page=content&id=JSA10681", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681" }, { "reference_url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727", "reference_id": "index?page=content&id=JSA10727", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10122", "reference_id": "index?page=content&id=SB10122", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10122" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143506486712441&w=2", "reference_id": "?l=bugtraq&m=143506486712441&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143506486712441&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143557934009303&w=2", "reference_id": "?l=bugtraq&m=143557934009303&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143557934009303&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143558092609708&w=2", "reference_id": "?l=bugtraq&m=143558092609708&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143558092609708&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143628304012255&w=2", "reference_id": "?l=bugtraq&m=143628304012255&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143628304012255&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143637549705650&w=2", "reference_id": "?l=bugtraq&m=143637549705650&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143637549705650&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143655800220052&w=2", "reference_id": "?l=bugtraq&m=143655800220052&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143655800220052&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143880121627664&w=2", "reference_id": "?l=bugtraq&m=143880121627664&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143880121627664&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144043644216842&w=2", "reference_id": "?l=bugtraq&m=144043644216842&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144043644216842&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144050121701297&w=2", "reference_id": "?l=bugtraq&m=144050121701297&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144050121701297&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144060576831314&w=2", "reference_id": "?l=bugtraq&m=144060576831314&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144060576831314&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144060606031437&w=2", "reference_id": "?l=bugtraq&m=144060606031437&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144060606031437&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144061542602287&w=2", "reference_id": "?l=bugtraq&m=144061542602287&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144061542602287&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144069189622016&w=2", "reference_id": "?l=bugtraq&m=144069189622016&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144069189622016&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144102017024820&w=2", "reference_id": "?l=bugtraq&m=144102017024820&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144102017024820&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144104533800819&w=2", "reference_id": "?l=bugtraq&m=144104533800819&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144104533800819&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144493176821532&w=2", "reference_id": "?l=bugtraq&m=144493176821532&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144493176821532&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=145409266329539&w=2", "reference_id": "?l=bugtraq&m=145409266329539&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=145409266329539&w=2" }, { "reference_url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/", "reference_id": "logjam-freak-upcoming-changes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/" }, { "reference_url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/", "reference_id": "logjam-the-latest-tls-vulnerability-explained", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-70", "reference_id": "mfsa2015-70", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-70" }, { "reference_url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html", "reference_id": "mfsa2015-70.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html" }, { "reference_url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html" }, { "reference_url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html", "reference_id": "msg00002.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html", "reference_id": "msg00003.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html", "reference_id": "msg00004.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html", "reference_id": "msg00005.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html", "reference_id": "msg00006.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html", "reference_id": "msg00007.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html", "reference_id": "msg00016.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html", "reference_id": "msg00017.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html", "reference_id": "msg00021.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html", "reference_id": "msg00025.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html", "reference_id": "msg00026.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html", "reference_id": "msg00031.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html", "reference_id": "msg00031.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html", "reference_id": "msg00032.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html", "reference_id": "msg00033.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html", "reference_id": "msg00034.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html", "reference_id": "msg00037.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html", "reference_id": "msg00037.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html", "reference_id": "msg00039.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html", "reference_id": "msg00039.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html", "reference_id": "msg00040.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html", "reference_id": "msg00040.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html", "reference_id": "msg00046.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html", "reference_id": "msg00047.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html", "reference_id": "msg00094.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html", "reference_id": "msg00097.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html" }, { "reference_url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc", "reference_id": "NetBSD-SA2015-008.txt.asc", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc" }, { "reference_url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes", "reference_id": "NSS_3.19.1_release_notes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20150619-0001/", "reference_id": "ntap-20150619-0001", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20150619-0001/" }, { "reference_url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm", "reference_id": "releaseNotes.htm", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1072", "reference_id": "RHSA-2015:1072", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1072" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html", "reference_id": "RHSA-2015-1072.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1185", "reference_id": "RHSA-2015:1185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1185" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html", "reference_id": "RHSA-2015-1185.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html", "reference_id": "RHSA-2015-1197.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1228", "reference_id": "RHSA-2015:1228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1228" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html", "reference_id": "RHSA-2015-1228.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1229", "reference_id": "RHSA-2015:1229", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1229" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html", "reference_id": "RHSA-2015-1229.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1230", "reference_id": "RHSA-2015:1230", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1230" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html", "reference_id": "RHSA-2015-1230.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1241", "reference_id": "RHSA-2015:1241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1241" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html", "reference_id": "RHSA-2015-1241.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1242", "reference_id": "RHSA-2015:1242", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1242" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html", "reference_id": "RHSA-2015-1242.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1243", "reference_id": "RHSA-2015:1243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1243" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html", "reference_id": "RHSA-2015-1243.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1485", "reference_id": "RHSA-2015:1485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1485" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html", "reference_id": "RHSA-2015-1485.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1486", "reference_id": "RHSA-2015:1486", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1486" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html", "reference_id": "RHSA-2015-1486.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1488", "reference_id": "RHSA-2015:1488", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1488" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html", "reference_id": "RHSA-2015-1488.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1526", "reference_id": "RHSA-2015:1526", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1526" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html", "reference_id": "RHSA-2015-1526.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1544", "reference_id": "RHSA-2015:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1544" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html", "reference_id": "RHSA-2015-1544.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1604", "reference_id": "RHSA-2015:1604", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1604" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html", "reference_id": "RHSA-2015-1604.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html", "reference_id": "RHSA-2016-1624.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://bto.bluecoat.com/security-advisory/sa98", "reference_id": "sa98", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://bto.bluecoat.com/security-advisory/sa98" }, { "reference_url": "https://www.openssl.org/news/secadv_20150611.txt", "reference_id": "secadv_20150611.txt", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.openssl.org/news/secadv_20150611.txt" }, { "reference_url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc", "reference_id": "sendmail_advisory2.asc", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554", "reference_id": "show_bug.cgi?id=1138554", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", "reference_id": "ssa-412672.pdf", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf" }, { "reference_url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes", "reference_id": "StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes" }, { "reference_url": "https://usn.ubuntu.com/2656-1/", "reference_id": "USN-2656-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2656-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2656-1", "reference_id": "USN-2656-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2656-1" }, { "reference_url": "https://usn.ubuntu.com/2656-2/", "reference_id": "USN-2656-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2656-2/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2656-2", "reference_id": "USN-2656-2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2656-2" }, { "reference_url": "https://usn.ubuntu.com/2673-1/", "reference_id": "USN-2673-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2673-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2673-1", "reference_id": "USN-2673-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2673-1" }, { "reference_url": "https://usn.ubuntu.com/2696-1/", "reference_id": "USN-2696-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2696-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2696-1", "reference_id": "USN-2696-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2696-1" }, { "reference_url": "https://usn.ubuntu.com/2706-1/", "reference_id": "USN-2706-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2706-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2706-1", "reference_id": "USN-2706-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2706-1" }, { "reference_url": "https://weakdh.org/", "reference_id": "weakdh.org", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://weakdh.org/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-4000" ], "risk_score": 7.2, "exploitability": "2.0", "weighted_severity": "3.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7gkv-pu79-43hx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97187?format=api", "vulnerability_id": "VCID-7qvb-vmm3-eud8", "summary": "The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0735.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04803", "scoring_system": "epss", "scoring_elements": "0.89694", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.04803", "scoring_system": "epss", "scoring_elements": "0.89676", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04803", "scoring_system": "epss", "scoring_elements": "0.89693", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04803", "scoring_system": "epss", "scoring_elements": "0.89695", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644356", "reference_id": "1644356", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644356" }, { "reference_url": "https://security.archlinux.org/ASA-201812-5", "reference_id": "ASA-201812-5", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201812-5" }, { "reference_url": "https://security.archlinux.org/ASA-201812-6", "reference_id": "ASA-201812-6", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201812-6" }, { "reference_url": "https://security.archlinux.org/AVG-792", "reference_id": "AVG-792", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-792" }, { "reference_url": "https://security.archlinux.org/AVG-793", "reference_id": "AVG-793", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-793" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0483", "reference_id": "RHSA-2019:0483", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0483" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3700", "reference_id": "RHSA-2019:3700", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3700" }, { "reference_url": "https://usn.ubuntu.com/3840-1/", "reference_id": "USN-3840-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3840-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2018-0735" ], "risk_score": 2.3, "exploitability": "0.5", "weighted_severity": "4.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7qvb-vmm3-eud8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97123?format=api", "vulnerability_id": "VCID-7wh9-yyhq-17bd", "summary": "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83779", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83803", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83804", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83799", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196737", "reference_id": "1196737", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196737" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1089", "reference_id": "RHSA-2016:1089", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1089" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0209" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7wh9-yyhq-17bd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2961?format=api", "vulnerability_id": "VCID-81zk-xrsj-cufe", "summary": "Security researcher Karthikeyan Bhargavan reported an issue\nin Network Security Services (NSS) where MD5 signatures in the server signature within the\nTLS 1.2 ServerKeyExchange message are still accepted. This is an issue since NSS has\nofficially disallowed the accepting MD5 as a hash algorithm in signatures since 2011. This\nissues exposes NSS based clients such as Firefox to theoretical collision-based forgery\nattacks. This issue was fixed in NSS version 3.20.2.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7575", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78075", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78102", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78109", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78099", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1526", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1526" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289841", "reference_id": "1289841", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289841" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575", "reference_id": "CVE-2015-7575", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575" }, { "reference_url": "https://security.gentoo.org/glsa/201605-06", "reference_id": "GLSA-201605-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201605-06" }, { "reference_url": "https://security.gentoo.org/glsa/201701-46", "reference_id": "GLSA-201701-46", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-46" }, { "reference_url": "https://security.gentoo.org/glsa/201706-18", "reference_id": "GLSA-201706-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201706-18" }, { "reference_url": "https://security.gentoo.org/glsa/201801-15", "reference_id": "GLSA-201801-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-15" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-150", "reference_id": "mfsa2015-150", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0007", "reference_id": "RHSA-2016:0007", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0007" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0008", "reference_id": "RHSA-2016:0008", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0008" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0012", "reference_id": "RHSA-2016:0012", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0012" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0049", "reference_id": "RHSA-2016:0049", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0049" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0050", "reference_id": "RHSA-2016:0050", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0053", "reference_id": "RHSA-2016:0053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0054", "reference_id": "RHSA-2016:0054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0055", "reference_id": "RHSA-2016:0055", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0055" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0056", "reference_id": "RHSA-2016:0056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0098", "reference_id": "RHSA-2016:0098", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0098" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0099", "reference_id": "RHSA-2016:0099", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0099" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0100", "reference_id": "RHSA-2016:0100", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0100" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0101", "reference_id": "RHSA-2016:0101", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0101" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1430", "reference_id": "RHSA-2016:1430", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1430" }, { "reference_url": "https://usn.ubuntu.com/2863-1/", "reference_id": "USN-2863-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2863-1/" }, { "reference_url": "https://usn.ubuntu.com/2864-1/", "reference_id": "USN-2864-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2864-1/" }, { "reference_url": "https://usn.ubuntu.com/2865-1/", "reference_id": "USN-2865-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2865-1/" }, { "reference_url": "https://usn.ubuntu.com/2866-1/", "reference_id": "USN-2866-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2866-1/" }, { "reference_url": "https://usn.ubuntu.com/2884-1/", "reference_id": "USN-2884-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2884-1/" }, { "reference_url": "https://usn.ubuntu.com/2904-1/", "reference_id": "USN-2904-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2904-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-7575" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-81zk-xrsj-cufe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97151?format=api", "vulnerability_id": "VCID-842m-3fr7-g7a6", "summary": "The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0701.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0701", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.27483", "scoring_system": "epss", "scoring_elements": "0.96516", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.27483", "scoring_system": "epss", "scoring_elements": "0.96518", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.27483", "scoring_system": "epss", "scoring_elements": "0.96522", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.27483", "scoring_system": "epss", "scoring_elements": "0.96523", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0701" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0701", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0701" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:C/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301845", "reference_id": "1301845", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301845" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://usn.ubuntu.com/2883-1/", "reference_id": "USN-2883-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2883-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0701" ], "risk_score": 1.8, "exploitability": "0.5", "weighted_severity": "3.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-842m-3fr7-g7a6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97175?format=api", "vulnerability_id": "VCID-895j-d4aq-2qb7", "summary": "In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3730.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3730", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.5922", "scoring_system": "epss", "scoring_elements": "0.98268", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.5922", "scoring_system": "epss", "scoring_elements": "0.98271", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.5922", "scoring_system": "epss", "scoring_elements": "0.98272", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3730" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3730", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3730" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416855", "reference_id": "1416855", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416855" }, { "reference_url": "https://github.com/guidovranken/CVE-2017-3730/blob/98cca4c8c706c6b3ff8b6f2fc9fb2e8c956f3263/crash-postfix.c", "reference_id": "CVE-2017-3730", "reference_type": "exploit", "scores": [], "url": "https://github.com/guidovranken/CVE-2017-3730/blob/98cca4c8c706c6b3ff8b6f2fc9fb2e8c956f3263/crash-postfix.c" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/41192.c", "reference_id": "CVE-2017-3730", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/41192.c" }, { "reference_url": "https://security.gentoo.org/glsa/201702-07", "reference_id": "GLSA-201702-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-07" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3730" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-895j-d4aq-2qb7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5933?format=api", "vulnerability_id": "VCID-8fae-zjwu-47gz", "summary": "denial of service", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html" }, { "reference_url": "http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1967.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1967", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.60769", "scoring_system": "epss", "scoring_elements": "0.98321", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.60769", "scoring_system": "epss", "scoring_elements": "0.98324", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.60769", "scoring_system": "epss", "scoring_elements": "0.98325", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1967" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1967" }, { "reference_url": "http://seclists.org/fulldisclosure/2020/May/5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/fulldisclosure/2020/May/5" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/irsl/CVE-2020-1967", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/irsl/CVE-2020-1967" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=eb563247aef3e83dda7679c43f9649270462e5b1" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440" }, { "reference_url": "https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0015.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0015.html" }, { "reference_url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.asc" }, { "reference_url": "https://security.gentoo.org/glsa/202004-10", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202004-10" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200424-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20200424-0003" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200424-0003/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20200424-0003/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200717-0004", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20200717-0004" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4661", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2020/dsa-4661" }, { "reference_url": "https://www.openssl.org/news/secadv/20200421.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.openssl.org/news/secadv/20200421.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "reference_url": "https://www.oracle.com//security-alerts/cpujul2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2020.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.synology.com/security/advisory/Synology_SA_20_05", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.synology.com/security/advisory/Synology_SA_20_05" }, { "reference_url": "https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSL" }, { "reference_url": "https://www.tenable.com/security/tns-2020-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2020-03" }, { "reference_url": "https://www.tenable.com/security/tns-2020-04", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2020-04" }, { "reference_url": "https://www.tenable.com/security/tns-2020-11", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2020-11" }, { "reference_url": "https://www.tenable.com/security/tns-2021-10", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-10" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2020/04/22/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2020/04/22/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823670", "reference_id": "1823670", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823670" }, { "reference_url": "https://security.archlinux.org/ASA-202004-18", "reference_id": "ASA-202004-18", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202004-18" }, { "reference_url": "https://security.archlinux.org/ASA-202004-19", "reference_id": "ASA-202004-19", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202004-19" }, { "reference_url": "https://security.archlinux.org/AVG-1139", "reference_id": "AVG-1139", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1139" }, { "reference_url": "https://security.archlinux.org/AVG-1142", "reference_id": "AVG-1142", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1142" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1967", "reference_id": "CVE-2020-1967", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1967" }, { "reference_url": "https://github.com/advisories/GHSA-jq65-29v4-4x35", "reference_id": "GHSA-jq65-29v4-4x35", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jq65-29v4-4x35" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2020-1967", "GHSA-jq65-29v4-4x35" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8fae-zjwu-47gz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5617?format=api", "vulnerability_id": "VCID-8j5t-nvjh-7kez", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3450.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3450.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3450", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66573", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66566", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66533", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00504", "scoring_system": "epss", "scoring_elements": "0.66581", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3450" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3450" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10356", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10356" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/" }, { "reference_url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0056.html" }, { "reference_url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc" }, { "reference_url": "https://security.gentoo.org/glsa/202103-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202103-03" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210326-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210326-0006" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210326-0006/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20210326-0006/" }, { "reference_url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" }, { "reference_url": "https://www.openssl.org/news/secadv/20210325.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.openssl.org/news/secadv/20210325.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com//security-alerts/cpujul2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-05", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-05" }, { "reference_url": "https://www.tenable.com/security/tns-2021-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-08" }, { "reference_url": "https://www.tenable.com/security/tns-2021-09", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-09" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/27/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/27/1" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/27/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/27/2" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/28/3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/28/3" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/03/28/4", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/03/28/4" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941547", "reference_id": "1941547", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941547" }, { "reference_url": "https://security.archlinux.org/ASA-202103-10", "reference_id": "ASA-202103-10", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202103-10" }, { "reference_url": "https://security.archlinux.org/AVG-1736", "reference_id": "AVG-1736", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1736" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450", "reference_id": "CVE-2021-3450", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3450" }, { "reference_url": "https://github.com/advisories/GHSA-8hfj-xrj2-pm22", "reference_id": "GHSA-8hfj-xrj2-pm22", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8hfj-xrj2-pm22" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1024", "reference_id": "RHSA-2021:1024", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1024" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1189", "reference_id": "RHSA-2021:1189", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1189" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1195", "reference_id": "RHSA-2021:1195", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1195" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1196", "reference_id": "RHSA-2021:1196", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1196" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1199", "reference_id": "RHSA-2021:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1200", "reference_id": "RHSA-2021:1200", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1200" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1202", "reference_id": "RHSA-2021:1202", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1202" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:1203", "reference_id": "RHSA-2021:1203", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:1203" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-3450", "GHSA-8hfj-xrj2-pm22" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8j5t-nvjh-7kez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45301?format=api", "vulnerability_id": "VCID-8q7w-7je3-zkgt", "summary": "Allocation of Resources Without Limits or Throttling\nIssue summary: Processing some specially crafted ASN.1 object identifiers or\ndata containing them may be very slow.\n\nImpact summary: Applications that use OBJ_obj2txt() directly, or use any of\nthe OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message\nsize limit may experience notable to very long delays when processing those\nmessages, which may lead to a Denial of Service.\n\nAn OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers -\nmost of which have no size limit. OBJ_obj2txt() may be used to translate\nan ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL\ntype ASN1_OBJECT) to its canonical numeric text form, which are the\nsub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by\nperiods.\n\nWhen one of the sub-identifiers in the OBJECT IDENTIFIER is very large\n(these are sizes that are seen as absurdly large, taking up tens or hundreds\nof KiBs), the translation to a decimal number in text may take a very long\ntime. The time complexity is O(n^2) with 'n' being the size of the\nsub-identifiers in bytes (*).\n\nWith OpenSSL 3.0, support to fetch cryptographic algorithms using names /\nidentifiers in string form was introduced. This includes using OBJECT\nIDENTIFIERs in canonical numeric text form as identifiers for fetching\nalgorithms.\n\nSuch OBJECT IDENTIFIERs may be received through the ASN.1 structure\nAlgorithmIdentifier, which is commonly used in multiple protocols to specify\nwhat cryptographic algorithm should be used to sign or verify, encrypt or\ndecrypt, or digest passed data.\n\nApplications that call OBJ_obj2txt() directly with untrusted data are\naffected, with any version of OpenSSL. If the use is for the mere purpose\nof display, the severity is considered low.\n\nIn OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME,\nCMS, CMP/CRMF or TS. It also impacts anything that processes X.509\ncertificates, including simple things like verifying its signature.\n\nThe impact on TLS is relatively low, because all versions of OpenSSL have a\n100KiB limit on the peer's certificate chain. Additionally, this only\nimpacts clients, or servers that have explicitly enabled client\nauthentication.\n\nIn OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects,\nsuch as X.509 certificates. This is assumed to not happen in such a way\nthat it would cause a Denial of Service, so these versions are considered\nnot affected by this issue in such a way that it would be cause for concern,\nand the severity is therefore considered low.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-2650.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-2650.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-2650", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91789", "scoring_system": "epss", "scoring_elements": "0.99701", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.91789", "scoring_system": "epss", "scoring_elements": "0.99703", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-2650" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=423a2bc737a908ad0c77bda470b2b59dc879936b" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=853c5e56ee0b8650c73140816bb8b91d6163422c" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9e209944b35cf82368071f160a744b6178f9b098" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db779b0e10b047f2585615e0b8f2acdf21f8544a" }, { "reference_url": "https://www.debian.org/security/2023/dsa-5417", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://www.debian.org/security/2023/dsa-5417" }, { "reference_url": "https://www.openssl.org/news/secadv/20230530.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://www.openssl.org/news/secadv/20230530.txt" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2023/05/30/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2023/05/30/1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2207947", "reference_id": "2207947", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2207947" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2650", "reference_id": "CVE-2023-2650", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-2650" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230703-0001/", "reference_id": "ntap-20230703-0001", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230703-0001/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20231027-0009/", "reference_id": "ntap-20231027-0009", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20231027-0009/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3722", "reference_id": "RHSA-2023:3722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6330", "reference_id": "RHSA-2023:6330", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6330" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009", "reference_id": "SNWLID-2023-0009", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:55:48Z/" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0009" }, { "reference_url": "https://usn.ubuntu.com/6119-1/", "reference_id": "USN-6119-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6119-1/" }, { "reference_url": "https://usn.ubuntu.com/6188-1/", "reference_id": "USN-6188-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6188-1/" }, { "reference_url": "https://usn.ubuntu.com/6672-1/", "reference_id": "USN-6672-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6672-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-2650" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "5.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8q7w-7je3-zkgt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97145?format=api", "vulnerability_id": "VCID-97kv-2j1c-yuc2", "summary": "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98072", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98073", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98074", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288320", "reference_id": "1288320", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288320" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3194" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-97kv-2j1c-yuc2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97138?format=api", "vulnerability_id": "VCID-99tx-2t22-6khg", "summary": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89354", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89373", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89372", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228603", "reference_id": "1228603", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228603" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1789" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-99tx-2t22-6khg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44773?format=api", "vulnerability_id": "VCID-as38-bfar-q3hh", "summary": "Improper Certificate Validation\nThe function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or incorrect policies to pass the certificate verification. As suddenly enabling the policy check could break existing deployments it was decided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy() function. Instead the applications that require OpenSSL to perform certificate policy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly enable the policy check by calling X509_VERIFY_PARAM_set_flags() with the X509_V_FLAG_POLICY_CHECK flag argument. Certificate policy checks are disabled by default in OpenSSL and are not commonly used by applications.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0466.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0466.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0466", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00848", "scoring_system": "epss", "scoring_elements": "0.75213", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00848", "scoring_system": "epss", "scoring_elements": "0.75237", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00848", "scoring_system": "epss", "scoring_elements": "0.75242", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00848", "scoring_system": "epss", "scoring_elements": "0.75245", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=0d16b7e99aafc0b4a6d729eec65a411a7e025f0a" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=51e8a84ce742db0f6c70510d0159dad8f7825908" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=73398dea26de9899fb4baa94098ad0a61f435c72" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc814a30fc4f0bc54fcea7d9a7462f5457aab061" }, { "reference_url": "https://www.openssl.org/news/secadv/20230328.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://www.openssl.org/news/secadv/20230328.txt" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720", "reference_id": "1034720", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2182565", "reference_id": "2182565", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2182565" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0466", "reference_id": "CVE-2023-0466", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0466" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230414-0001/", "reference_id": "ntap-20230414-0001", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-19T17:11:17Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230414-0001/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3722", "reference_id": "RHSA-2023:3722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://usn.ubuntu.com/6039-1/", "reference_id": "USN-6039-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6039-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-0466" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-as38-bfar-q3hh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97188?format=api", "vulnerability_id": "VCID-asbv-yhcz-9qdr", "summary": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0737.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.38121", "scoring_system": "epss", "scoring_elements": "0.9731", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.38121", "scoring_system": "epss", "scoring_elements": "0.97304", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.38121", "scoring_system": "epss", "scoring_elements": "0.97308", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.38121", "scoring_system": "epss", "scoring_elements": "0.97309", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253", "reference_id": "1568253", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1568253" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895844", "reference_id": "895844", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=895844" }, { "reference_url": "https://security.archlinux.org/AVG-674", "reference_id": "AVG-674", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-674" }, { "reference_url": "https://security.archlinux.org/AVG-675", "reference_id": "AVG-675", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-675" }, { "reference_url": "https://security.gentoo.org/glsa/201811-21", "reference_id": "GLSA-201811-21", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-21" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3221", "reference_id": "RHSA-2018:3221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3932", "reference_id": "RHSA-2019:3932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3933", "reference_id": "RHSA-2019:3933", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3935", "reference_id": "RHSA-2019:3935", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "reference_url": "https://usn.ubuntu.com/3628-1/", "reference_id": "USN-3628-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3628-1/" }, { "reference_url": "https://usn.ubuntu.com/3628-2/", "reference_id": "USN-3628-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3628-2/" }, { "reference_url": "https://usn.ubuntu.com/3692-1/", "reference_id": "USN-3692-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3692-1/" }, { "reference_url": "https://usn.ubuntu.com/3692-2/", "reference_id": "USN-3692-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3692-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2018-0737" ], "risk_score": 1.5, "exploitability": "0.5", "weighted_severity": "3.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-asbv-yhcz-9qdr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97130?format=api", "vulnerability_id": "VCID-baum-2mwk-p7gt", "summary": "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90655", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90669", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90668", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90666", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202384", "reference_id": "1202384", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202384" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0289" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-baum-2mwk-p7gt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68072?format=api", "vulnerability_id": "VCID-bbu1-667d-vqcb", "summary": "openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22795.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22795.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-22795", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15396", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15446", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00048", "scoring_system": "epss", "scoring_elements": "0.15437", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-22795" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22795" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389", "reference_id": "2430389", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430389" }, { "reference_url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4", "reference_id": "2502e7b7d4c0cf4f972a881641fe09edc67aeec4", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4" }, { "reference_url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49", "reference_id": "572844beca95068394c916626a6d3a490f831a49", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49" }, { "reference_url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12", "reference_id": "7bbca05be55b129651d9df4bdb92becc45002c12", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12" }, { "reference_url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e", "reference_id": "eeee3cbd4d682095ed431052f00403004596373e", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e" }, { "reference_url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2", "reference_id": "ef2fb66ec571564d64d1c74a12e388a2a54d05d2", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-28T20:03:18Z/" } ], "url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2026-22795" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bbu1-667d-vqcb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97090?format=api", "vulnerability_id": "VCID-bd3y-xkqp-w7ey", "summary": "The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.92751", "scoring_system": "epss", "scoring_elements": "0.99766", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.92751", "scoring_system": "epss", "scoring_elements": "0.99767", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103598", "reference_id": "1103598", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103598" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0195" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bd3y-xkqp-w7ey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97155?format=api", "vulnerability_id": "VCID-bkgn-85j5-tbcd", "summary": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95859", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95863", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95866", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95867", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596", "reference_id": "1310596", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2568", "reference_id": "RHSA-2018:2568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2568" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2575", "reference_id": "RHSA-2018:2575", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2575" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2713", "reference_id": "RHSA-2018:2713", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2713" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0705" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bkgn-85j5-tbcd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97096?format=api", "vulnerability_id": "VCID-bpm2-rvhc-pfaz", "summary": "Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97447", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97453", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97454", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127499", "reference_id": "1127499", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127499" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3505" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bpm2-rvhc-pfaz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97102?format=api", "vulnerability_id": "VCID-bpm9-v7t1-j3d9", "summary": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.9031", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90325", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90324", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90322", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127504", "reference_id": "1127504", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127504" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0126", "reference_id": "RHSA-2015:0126", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0126" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0197", "reference_id": "RHSA-2015:0197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0197" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3511" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bpm9-v7t1-j3d9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97160?format=api", "vulnerability_id": "VCID-bsb3-4ph2-1bhg", "summary": "Integer overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2106.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.67349", "scoring_system": "epss", "scoring_elements": "0.98582", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.67349", "scoring_system": "epss", "scoring_elements": "0.98584", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331536", "reference_id": "1331536", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331536" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1648", "reference_id": "RHSA-2016:1648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1649", "reference_id": "RHSA-2016:1649", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1649" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2959-1/", "reference_id": "USN-2959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2106" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bsb3-4ph2-1bhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97177?format=api", "vulnerability_id": "VCID-btfw-3r9y-7kad", "summary": "If an SSL/TLS server or client is running on a 32-bit host, and a specific cipher is being used, then a truncated packet can cause that server or client to perform an out-of-bounds read, usually resulting in a crash. For OpenSSL 1.1.0, the crash can be triggered when using CHACHA20/POLY1305; users should upgrade to 1.1.0d. For Openssl 1.0.2, the crash can be triggered when using RC4-MD5; users who have not disabled that algorithm should update to 1.0.2k.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3731.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3731", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10401", "scoring_system": "epss", "scoring_elements": "0.93357", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.10401", "scoring_system": "epss", "scoring_elements": "0.93347", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.10401", "scoring_system": "epss", "scoring_elements": "0.93359", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.10401", "scoring_system": "epss", "scoring_elements": "0.9336", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3731" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852", "reference_id": "1416852", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416852" }, { "reference_url": "https://security.archlinux.org/ASA-201701-36", "reference_id": "ASA-201701-36", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-36" }, { "reference_url": "https://security.archlinux.org/ASA-201701-37", "reference_id": "ASA-201701-37", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-37" }, { "reference_url": "https://security.archlinux.org/AVG-154", "reference_id": "AVG-154", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-154" }, { "reference_url": "https://security.archlinux.org/AVG-155", "reference_id": "AVG-155", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-155" }, { "reference_url": "https://security.gentoo.org/glsa/201702-07", "reference_id": "GLSA-201702-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-07" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0286", "reference_id": "RHSA-2017:0286", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0286" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3731" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-btfw-3r9y-7kad" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/369695?format=api", "vulnerability_id": "VCID-c1mk-2p5p-fqc5", "summary": "regression update", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "DSA-4539-3 openssl" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c1mk-2p5p-fqc5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/88329?format=api", "vulnerability_id": "VCID-c28z-zhhx-9ugr", "summary": "openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-9143.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-9143.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-9143", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00883", "scoring_system": "epss", "scoring_elements": "0.75801", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00883", "scoring_system": "epss", "scoring_elements": "0.75814", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00883", "scoring_system": "epss", "scoring_elements": "0.75811", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-9143" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9143", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9143" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085378", "reference_id": "1085378", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1085378" }, { "reference_url": "https://openssl-library.org/news/secadv/20241016.txt", "reference_id": "20241016.txt", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://openssl-library.org/news/secadv/20241016.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2319236", "reference_id": "2319236", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2319236" }, { "reference_url": "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712", "reference_id": "72ae83ad214d2eef262461365a1975707f862712", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.com/openssl/openssl/commit/72ae83ad214d2eef262461365a1975707f862712" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a", "reference_id": "8efc0cbaa8ebba8e116f7b81a876a4123594d86a", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/8efc0cbaa8ebba8e116f7b81a876a4123594d86a" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41", "reference_id": "9d576994cec2b7aa37a91740ea7e680810957e41", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/9d576994cec2b7aa37a91740ea7e680810957e41" }, { "reference_url": "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700", "reference_id": "bc7e04d7c8d509fb78fc0e285aa948fb0da04700", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.com/openssl/openssl/commit/bc7e04d7c8d509fb78fc0e285aa948fb0da04700" }, { "reference_url": "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4", "reference_id": "c0d3e4d32d2805f49bec30547f225bc4d092e1f4", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.com/openssl/openssl/commit/c0d3e4d32d2805f49bec30547f225bc4d092e1f4" }, { "reference_url": "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154", "reference_id": "fdf6723362ca51bd883295efe206cb5b1cfa5154", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T19:45:11Z/" } ], "url": "https://github.com/openssl/openssl/commit/fdf6723362ca51bd883295efe206cb5b1cfa5154" }, { "reference_url": "https://usn.ubuntu.com/7264-1/", "reference_id": "USN-7264-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7264-1/" }, { "reference_url": "https://usn.ubuntu.com/7278-1/", "reference_id": "USN-7278-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7278-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-9143" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c28z-zhhx-9ugr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97184?format=api", "vulnerability_id": "VCID-c45f-5ecq-t3a4", "summary": "During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0732.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.78382", "scoring_system": "epss", "scoring_elements": "0.99051", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.78382", "scoring_system": "epss", "scoring_elements": "0.99053", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.78382", "scoring_system": "epss", "scoring_elements": "0.99052", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591100", "reference_id": "1591100", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591100" }, { "reference_url": "https://security.archlinux.org/AVG-674", "reference_id": "AVG-674", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-674" }, { "reference_url": "https://security.archlinux.org/AVG-675", "reference_id": "AVG-675", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-675" }, { "reference_url": "https://security.gentoo.org/glsa/201811-03", "reference_id": "GLSA-201811-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2552", "reference_id": "RHSA-2018:2552", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2552" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2553", "reference_id": "RHSA-2018:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3221", "reference_id": "RHSA-2018:3221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1296", "reference_id": "RHSA-2019:1296", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1296" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1297", "reference_id": "RHSA-2019:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1297" }, { "reference_url": "https://usn.ubuntu.com/3692-1/", "reference_id": "USN-3692-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3692-1/" }, { "reference_url": "https://usn.ubuntu.com/3692-2/", "reference_id": "USN-3692-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3692-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2018-0732" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c45f-5ecq-t3a4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97116?format=api", "vulnerability_id": "VCID-chgs-b5zr-2uey", "summary": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91945", "scoring_system": "epss", "scoring_elements": "0.99712", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "10", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:C/I:C/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180184", "reference_id": "1180184", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180184" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0849", "reference_id": "RHSA-2015:0849", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0204" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-chgs-b5zr-2uey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6783?format=api", "vulnerability_id": "VCID-d1w5-8ktx-cubx", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2180.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.042", "scoring_system": "epss", "scoring_elements": "0.88923", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.042", "scoring_system": "epss", "scoring_elements": "0.8894", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.042", "scoring_system": "epss", "scoring_elements": "0.88941", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.9", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1359615", "reference_id": "1359615", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1359615" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2180" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d1w5-8ktx-cubx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97128?format=api", "vulnerability_id": "VCID-d6qb-nwa5-k7ap", "summary": "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89813", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89829", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.8983", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89828", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202380", "reference_id": "1202380", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202380" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0287" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d6qb-nwa5-k7ap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97088?format=api", "vulnerability_id": "VCID-d8gm-d7ng-1bam", "summary": "The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58454", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58501", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.5851", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58502", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0076" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080276", "reference_id": "1080276", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080276" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742923", "reference_id": "742923", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742923" }, { "reference_url": "https://security.gentoo.org/glsa/201404-07", "reference_id": "GLSA-201404-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201404-07" }, { "reference_url": "https://usn.ubuntu.com/2165-1/", "reference_id": "USN-2165-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2165-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0076" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d8gm-d7ng-1bam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97141?format=api", "vulnerability_id": "VCID-d9rt-g2k8-pbey", "summary": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94014", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94023", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94022", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94025", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1792" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228607", "reference_id": "1228607", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228607" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1792" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d9rt-g2k8-pbey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6781?format=api", "vulnerability_id": "VCID-dspw-qctj-jufk", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2182.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.28947", "scoring_system": "epss", "scoring_elements": "0.9666", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.28947", "scoring_system": "epss", "scoring_elements": "0.96665", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.28947", "scoring_system": "epss", "scoring_elements": "0.96657", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.28947", "scoring_system": "epss", "scoring_elements": "0.96664", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:N/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340", "reference_id": "1367340", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1367340" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2182" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dspw-qctj-jufk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97118?format=api", "vulnerability_id": "VCID-dvr1-aacj-67b3", "summary": "Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96839", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96843", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96847", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96848", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180235", "reference_id": "1180235", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180235" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0206" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dvr1-aacj-67b3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97092?format=api", "vulnerability_id": "VCID-e5ah-km4p-pbcx", "summary": "The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.82097", "scoring_system": "epss", "scoring_elements": "0.9923", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.82097", "scoring_system": "epss", "scoring_elements": "0.99231", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593", "reference_id": "1103593", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021", "reference_id": "RHSA-2014:1021", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1021" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086", "reference_id": "RHSA-2014:1086", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1086" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0221" ], "risk_score": 1.4, "exploitability": "2.0", "weighted_severity": "0.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e5ah-km4p-pbcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6655?format=api", "vulnerability_id": "VCID-e6jy-vxau-jfba", "summary": "denial of service", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7053.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7053", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01059", "scoring_system": "epss", "scoring_elements": "0.7797", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01059", "scoring_system": "epss", "scoring_elements": "0.77997", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01059", "scoring_system": "epss", "scoring_elements": "0.78003", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01059", "scoring_system": "epss", "scoring_elements": "0.77994", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7053" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7053" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393930", "reference_id": "1393930", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393930" }, { "reference_url": "https://security.archlinux.org/AVG-143", "reference_id": "AVG-143", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-143" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2016-7053" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e6jy-vxau-jfba" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97140?format=api", "vulnerability_id": "VCID-e8wv-nh7t-g3ey", "summary": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.9329", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93301", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93302", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93299", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228608", "reference_id": "1228608", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228608" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1791" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e8wv-nh7t-g3ey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97192?format=api", "vulnerability_id": "VCID-e92e-benv-bffs", "summary": "OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes did not share the same RNG state. However this protection was not being used in the default case. A partial mitigation for this issue is that the output from a high precision timer is mixed into the RNG state so the likelihood of a parent and child process sharing state is significantly reduced. If an application already calls OPENSSL_init_crypto() explicitly using OPENSSL_INIT_ATFORK then this problem does not occur at all. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1549.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1549", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02629", "scoring_system": "epss", "scoring_elements": "0.8597", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02629", "scoring_system": "epss", "scoring_elements": "0.85991", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02629", "scoring_system": "epss", "scoring_elements": "0.85994", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02629", "scoring_system": "epss", "scoring_elements": "0.8599", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1549" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1549", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1549" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752095", "reference_id": "1752095", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752095" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336", "reference_id": "RHSA-2020:1336", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1336" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337", "reference_id": "RHSA-2020:1337", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1337" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1840", "reference_id": "RHSA-2020:1840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1840" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2019-1549" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e92e-benv-bffs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6827?format=api", "vulnerability_id": "VCID-erdm-7pfg-e7hc", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1292.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-1292.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-1292", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.38894", "scoring_system": "epss", "scoring_elements": "0.9735", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.38894", "scoring_system": "epss", "scoring_elements": "0.97348", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.38894", "scoring_system": "epss", "scoring_elements": "0.97344", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-1292" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23" }, { "reference_url": "https://www.openssl.org/news/secadv/20220503.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://www.openssl.org/news/secadv/20220503.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494", "reference_id": "2081494", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2081494" }, { "reference_url": "https://security.archlinux.org/AVG-2702", "reference_id": "AVG-2702", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2702" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1292", "reference_id": "CVE-2022-1292", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1292" }, { "reference_url": "https://www.debian.org/security/2022/dsa-5139", "reference_id": "dsa-5139", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://www.debian.org/security/2022/dsa-5139" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html", "reference_id": "msg00019.html", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220602-0009/", "reference_id": "ntap-20220602-0009", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20220602-0009/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5818", "reference_id": "RHSA-2022:5818", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5818" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6224", "reference_id": "RHSA-2022:6224", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6224" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8840", "reference_id": "RHSA-2022:8840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8840" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8841", "reference_id": "RHSA-2022:8841", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8841" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8913", "reference_id": "RHSA-2022:8913", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8913" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8917", "reference_id": "RHSA-2022:8917", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8917" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5931", "reference_id": "RHSA-2023:5931", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5931" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5979", "reference_id": "RHSA-2023:5979", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5979" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5980", "reference_id": "RHSA-2023:5980", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5980" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5982", "reference_id": "RHSA-2023:5982", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5982" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:6818", "reference_id": "RHSA-2023:6818", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:6818" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011", "reference_id": "SNWLID-2022-0011", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011" }, { "reference_url": "https://usn.ubuntu.com/5402-1/", "reference_id": "USN-5402-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5402-1/" }, { "reference_url": "https://usn.ubuntu.com/5402-2/", "reference_id": "USN-5402-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5402-2/" }, { "reference_url": "https://usn.ubuntu.com/6457-1/", "reference_id": "USN-6457-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6457-1/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" }, { "reference_url": "https://usn.ubuntu.com/7060-1/", "reference_id": "USN-7060-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7060-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/", "reference_id": "VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/", "reference_id": "ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:27:35Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" }, { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2022-1292" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-erdm-7pfg-e7hc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97103?format=api", "vulnerability_id": "VCID-ev86-zmde-sfep", "summary": "Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.9742", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.97426", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.97427", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127505", "reference_id": "1127505", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127505" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3512" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ev86-zmde-sfep" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97194?format=api", "vulnerability_id": "VCID-ewrx-kqzu-vkcj", "summary": "There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH512 are considered just feasible. However, for an attack the target would have to re-use the DH512 private key, which is not recommended anyway. Also applications directly using the low level API BN_mod_exp may be affected if they use BN_FLG_CONSTTIME. Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d). Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1551.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1551", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02801", "scoring_system": "epss", "scoring_elements": "0.86386", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02801", "scoring_system": "epss", "scoring_elements": "0.86409", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02801", "scoring_system": "epss", "scoring_elements": "0.8641", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02801", "scoring_system": "epss", "scoring_elements": "0.86406", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1551" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1780995", "reference_id": "1780995", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1780995" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947949", "reference_id": "947949", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4383", "reference_id": "RHSA-2020:4383", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4383" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4384", "reference_id": "RHSA-2020:4384", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4384" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4514", "reference_id": "RHSA-2020:4514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4514" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2019-1551" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ewrx-kqzu-vkcj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5766?format=api", "vulnerability_id": "VCID-fb66-4fr3-xye7", "summary": "denial of service", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1971.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1971.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1971", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00348", "scoring_system": "epss", "scoring_elements": "0.57648", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00348", "scoring_system": "epss", "scoring_elements": "0.57596", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00348", "scoring_system": "epss", "scoring_elements": "0.57657", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1971" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1971" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://www.openssl.org/news/secadv/20201208.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://www.openssl.org/news/secadv/20201208.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409", "reference_id": "1903409", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/09/14/2", "reference_id": "2", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2021/09/14/2" }, { "reference_url": "https://security.archlinux.org/ASA-202012-24", "reference_id": "ASA-202012-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202012-24" }, { "reference_url": "https://security.archlinux.org/AVG-1335", "reference_id": "AVG-1335", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1335" }, { "reference_url": "https://security.archlinux.org/AVG-1404", "reference_id": "AVG-1404", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1404" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "reference_id": "CVE-2020-1971", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/", "reference_id": "DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4807", "reference_id": "dsa-4807", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4807" }, { "reference_url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc", "reference_id": "FreeBSD-SA-20:33.openssl.asc", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc" }, { "reference_url": "https://security.gentoo.org/glsa/202012-13", "reference_id": "GLSA-202012-13", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://security.gentoo.org/glsa/202012-13" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html", "reference_id": "msg00020.html", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html", "reference_id": "msg00021.html", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20201218-0005/", "reference_id": "ntap-20201218-0005", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20201218-0005/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210513-0002/", "reference_id": "ntap-20210513-0002", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/", "reference_id": "PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/" }, { "reference_url": "https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E", "reference_id": "r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E", "reference_id": "rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5422", "reference_id": "RHSA-2020:5422", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5476", "reference_id": "RHSA-2020:5476", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5566", "reference_id": "RHSA-2020:5566", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5588", "reference_id": "RHSA-2020:5588", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5623", "reference_id": "RHSA-2020:5623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5637", "reference_id": "RHSA-2020:5637", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5639", "reference_id": "RHSA-2020:5639", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5640", "reference_id": "RHSA-2020:5640", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5641", "reference_id": "RHSA-2020:5641", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:5642", "reference_id": "RHSA-2020:5642", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0056", "reference_id": "RHSA-2021:0056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0486", "reference_id": "RHSA-2021:0486", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0488", "reference_id": "RHSA-2021:0488", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0489", "reference_id": "RHSA-2021:0489", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0491", "reference_id": "RHSA-2021:0491", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0494", "reference_id": "RHSA-2021:0494", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0495", "reference_id": "RHSA-2021:0495", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0949", "reference_id": "RHSA-2021:0949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676", "reference_id": "SA44676", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T15:40:23Z/" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676" }, { "reference_url": "https://usn.ubuntu.com/4662-1/", "reference_id": "USN-4662-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4662-1/" }, { "reference_url": "https://usn.ubuntu.com/4745-1/", "reference_id": "USN-4745-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4745-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2020-1971" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fb66-4fr3-xye7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6779?format=api", "vulnerability_id": "VCID-fgmh-6g91-9qgv", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6302.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.18419", "scoring_system": "epss", "scoring_elements": "0.95366", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.18419", "scoring_system": "epss", "scoring_elements": "0.9537", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.18419", "scoring_system": "epss", "scoring_elements": "0.95358", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.18419", "scoring_system": "epss", "scoring_elements": "0.95368", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855", "reference_id": "1369855", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369855" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-6302" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fgmh-6g91-9qgv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97143?format=api", "vulnerability_id": "VCID-fk7c-tmcz-n7gj", "summary": "The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segmentation fault) via a zero p value in an anonymous Diffie-Hellman (DH) ServerKeyExchange message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1794.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1794", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09852", "scoring_system": "epss", "scoring_elements": "0.93125", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.09852", "scoring_system": "epss", "scoring_elements": "0.93137", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.09852", "scoring_system": "epss", "scoring_elements": "0.93136", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09852", "scoring_system": "epss", "scoring_elements": "0.93133", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1794" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1794", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1794" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288955", "reference_id": "1288955", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288955" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1794" ], "risk_score": 0.7, "exploitability": "0.5", "weighted_severity": "1.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fk7c-tmcz-n7gj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/90356?format=api", "vulnerability_id": "VCID-fv1c-cve4-kkgf", "summary": "openssl: Use After Free with SSL_free_buffers", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4741.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4741.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4741", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58446", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58445", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00359", "scoring_system": "epss", "scoring_elements": "0.58455", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-4741" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4741" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072113", "reference_id": "1072113", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072113" }, { "reference_url": "https://www.openssl.org/news/secadv/20240528.txt", "reference_id": "20240528.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://www.openssl.org/news/secadv/20240528.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283757", "reference_id": "2283757", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283757" }, { "reference_url": "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177", "reference_id": "704f725b96aa373ee45ecfb23f6abfe8be8d9177", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://github.com/openssl/openssl/commit/704f725b96aa373ee45ecfb23f6abfe8be8d9177" }, { "reference_url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "reference_id": "b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://github.com/openssl/openssl/commit/b3f0eb0a295f58f16ba43ba99dad70d4ee5c437d" }, { "reference_url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac", "reference_id": "c88c3de51020c37e8706bf7a682a162593053aac", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://github.com/openssl/openssl/commit/c88c3de51020c37e8706bf7a682a162593053aac" }, { "reference_url": "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8", "reference_id": "e5093133c35ca82874ad83697af76f4b0f7e3bd8", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://github.com/openssl/openssl/commit/e5093133c35ca82874ad83697af76f4b0f7e3bd8" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4", "reference_id": "f7a045f3143fc6da2ee66bf52d8df04829590dd4", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-11-13T14:45:07Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/f7a045f3143fc6da2ee66bf52d8df04829590dd4" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9333", "reference_id": "RHSA-2024:9333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9333" }, { "reference_url": "https://usn.ubuntu.com/6937-1/", "reference_id": "USN-6937-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6937-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-4741" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fv1c-cve4-kkgf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6778?format=api", "vulnerability_id": "VCID-g1bm-2aj1-kff9", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6303.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.28821", "scoring_system": "epss", "scoring_elements": "0.96649", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.28821", "scoring_system": "epss", "scoring_elements": "0.96654", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.28821", "scoring_system": "epss", "scoring_elements": "0.96646", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.28821", "scoring_system": "epss", "scoring_elements": "0.96653", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.5", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1370146", "reference_id": "1370146", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1370146" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-6303" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-g1bm-2aj1-kff9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97172?format=api", "vulnerability_id": "VCID-ga7r-j1sv-2qh6", "summary": "There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is because the subroutine in question is not used in operations with the private key itself and an input of the attacker's direct choice. Otherwise the bug can manifest itself as transient authentication and key negotiation failures or reproducible erroneous outcome of public-key operations with specially crafted input. Among EC algorithms only Brainpool P-512 curves are affected and one presumably can attack ECDH key negotiation. Impact was not analyzed in detail, because pre-requisites for attack are considered unlikely. Namely multiple clients have to choose the curve in question and the server has to share the private key among them, neither of which is default behaviour. Even then only clients that chose the curve will be affected.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7055.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7055", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02693", "scoring_system": "epss", "scoring_elements": "0.86165", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.02693", "scoring_system": "epss", "scoring_elements": "0.86146", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02693", "scoring_system": "epss", "scoring_elements": "0.86167", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02693", "scoring_system": "epss", "scoring_elements": "0.8617", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7055" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7055" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929", "reference_id": "1393929", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1393929" }, { "reference_url": "https://security.archlinux.org/ASA-201701-36", "reference_id": "ASA-201701-36", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-36" }, { "reference_url": "https://security.archlinux.org/ASA-201701-37", "reference_id": "ASA-201701-37", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-37" }, { "reference_url": "https://security.archlinux.org/AVG-154", "reference_id": "AVG-154", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-154" }, { "reference_url": "https://security.archlinux.org/AVG-155", "reference_id": "AVG-155", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-155" }, { "reference_url": "https://security.archlinux.org/AVG-67", "reference_id": "AVG-67", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-67" }, { "reference_url": "https://security.archlinux.org/AVG-68", "reference_id": "AVG-68", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-68" }, { "reference_url": "https://security.gentoo.org/glsa/201702-07", "reference_id": "GLSA-201702-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-07" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2016-7055" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ga7r-j1sv-2qh6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44408?format=api", "vulnerability_id": "VCID-gj2m-z5b6-6yf2", "summary": "Double Free\nThe function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data. If the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4450.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4450.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00147", "scoring_system": "epss", "scoring_elements": "0.34946", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00147", "scoring_system": "epss", "scoring_elements": "0.3487", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00147", "scoring_system": "epss", "scoring_elements": "0.34966", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00147", "scoring_system": "epss", "scoring_elements": "0.34982", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:38Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:38Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2023-0010.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2023-0010.html" }, { "reference_url": "https://security.gentoo.org/glsa/202402-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:38Z/" } ], "url": "https://security.gentoo.org/glsa/202402-08" }, { "reference_url": "https://www.openssl.org/news/secadv/20230207.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:38Z/" } ], "url": "https://www.openssl.org/news/secadv/20230207.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164494", "reference_id": "2164494", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164494" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4450", "reference_id": "CVE-2022-4450", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4450" }, { "reference_url": "https://github.com/advisories/GHSA-v5w6-wcm8-jm4q", "reference_id": "GHSA-v5w6-wcm8-jm4q", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v5w6-wcm8-jm4q" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0946", "reference_id": "RHSA-2023:0946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1199", "reference_id": "RHSA-2023:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1405", "reference_id": "RHSA-2023:1405", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1405" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2165", "reference_id": "RHSA-2023:2165", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2165" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2932", "reference_id": "RHSA-2023:2932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3354", "reference_id": "RHSA-2023:3354", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3354" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3355", "reference_id": "RHSA-2023:3355", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3355" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3408", "reference_id": "RHSA-2023:3408", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3408" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3420", "reference_id": "RHSA-2023:3420", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3420" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3421", "reference_id": "RHSA-2023:3421", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3421" }, { "reference_url": "https://usn.ubuntu.com/5844-1/", "reference_id": "USN-5844-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5844-1/" }, { "reference_url": "https://usn.ubuntu.com/6564-1/", "reference_id": "USN-6564-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6564-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2022-4450", "GHSA-v5w6-wcm8-jm4q" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gj2m-z5b6-6yf2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97186?format=api", "vulnerability_id": "VCID-h92z-6ze3-m3cy", "summary": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0734.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05057", "scoring_system": "epss", "scoring_elements": "0.89948", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05057", "scoring_system": "epss", "scoring_elements": "0.89964", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05057", "scoring_system": "epss", "scoring_elements": "0.89961", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364", "reference_id": "1644364", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1644364" }, { "reference_url": "https://security.archlinux.org/ASA-201812-5", "reference_id": "ASA-201812-5", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201812-5" }, { "reference_url": "https://security.archlinux.org/ASA-201812-6", "reference_id": "ASA-201812-6", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201812-6" }, { "reference_url": "https://security.archlinux.org/AVG-792", "reference_id": "AVG-792", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-792" }, { "reference_url": "https://security.archlinux.org/AVG-793", "reference_id": "AVG-793", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-793" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2304", "reference_id": "RHSA-2019:2304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3700", "reference_id": "RHSA-2019:3700", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3700" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3932", "reference_id": "RHSA-2019:3932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3933", "reference_id": "RHSA-2019:3933", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3935", "reference_id": "RHSA-2019:3935", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "reference_url": "https://usn.ubuntu.com/3840-1/", "reference_id": "USN-3840-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3840-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2018-0734" ], "risk_score": 2.3, "exploitability": "0.5", "weighted_severity": "4.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h92z-6ze3-m3cy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97115?format=api", "vulnerability_id": "VCID-htwq-dece-p3e2", "summary": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92641", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92654", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.9265", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92645", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180187", "reference_id": "1180187", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-8275" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-htwq-dece-p3e2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97171?format=api", "vulnerability_id": "VCID-huj5-2wbw-m7dm", "summary": "crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7052.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7052", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08068", "scoring_system": "epss", "scoring_elements": "0.92296", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08068", "scoring_system": "epss", "scoring_elements": "0.92291", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.08068", "scoring_system": "epss", "scoring_elements": "0.92294", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0987", "scoring_system": "epss", "scoring_elements": "0.93133", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7052" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7052" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1379310", "reference_id": "1379310", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1379310" }, { "reference_url": "https://security.archlinux.org/ASA-201609-28", "reference_id": "ASA-201609-28", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-28" }, { "reference_url": "https://security.archlinux.org/ASA-201609-30", "reference_id": "ASA-201609-30", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-30" }, { "reference_url": "https://security.archlinux.org/AVG-33", "reference_id": "AVG-33", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-33" }, { "reference_url": "https://security.archlinux.org/AVG-34", "reference_id": "AVG-34", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-34" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-7052" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-huj5-2wbw-m7dm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97139?format=api", "vulnerability_id": "VCID-hvx5-c491-sba7", "summary": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93029", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.9304", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93037", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93033", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228604", "reference_id": "1228604", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228604" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1790" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hvx5-c491-sba7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97086?format=api", "vulnerability_id": "VCID-hyyj-mu1w-buf4", "summary": "The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97733", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97736", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97738", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045363", "reference_id": "1045363", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045363" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732754", "reference_id": "732754", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732754" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0041", "reference_id": "RHSA-2014:0041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0041" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-6449" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hyyj-mu1w-buf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97156?format=api", "vulnerability_id": "VCID-hz7k-w38p-mbbg", "summary": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97213", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97217", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97219", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97221", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311880", "reference_id": "1311880", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311880" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0302", "reference_id": "RHSA-2016:0302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0797" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hz7k-w38p-mbbg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97200?format=api", "vulnerability_id": "VCID-jfcp-evg4-8qd4", "summary": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected. Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4). Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2097.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-2097.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.66736", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.66702", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.6675", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.66743", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-2097" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=919925673d6c9cfed3c1085497f5dfbbed5fc431" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a98f339ddd7e8f487d6e0088d4a9a42324885a93" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2097" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2022-0032.html" }, { "reference_url": "https://security.gentoo.org/glsa/202210-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://security.gentoo.org/glsa/202210-02" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220715-0011", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20220715-0011" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230420-0008", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20230420-0008" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://www.debian.org/security/2023/dsa-5343", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://www.debian.org/security/2023/dsa-5343" }, { "reference_url": "https://www.openssl.org/news/secadv/20220705.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://www.openssl.org/news/secadv/20220705.txt" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023424", "reference_id": "1023424", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023424" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905", "reference_id": "2104905", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2104905" }, { "reference_url": "https://github.com/advisories/GHSA-3wx7-46ch-7rq2", "reference_id": "GHSA-3wx7-46ch-7rq2", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-3wx7-46ch-7rq2" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220715-0011/", "reference_id": "ntap-20220715-0011", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20220715-0011/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230420-0008/", "reference_id": "ntap-20230420-0008", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230420-0008/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/", "reference_id": "R6CK57NBQFTPUMXAPJURCGXUYT76NQAK", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5818", "reference_id": "RHSA-2022:5818", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5818" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6224", "reference_id": "RHSA-2022:6224", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6224" }, { "reference_url": "https://usn.ubuntu.com/5502-1/", "reference_id": "USN-5502-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5502-1/" }, { "reference_url": "https://usn.ubuntu.com/6457-1/", "reference_id": "USN-6457-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6457-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/", "reference_id": "V6567JERRHHJW2GNGJGKDRNHR7SNPZK7", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/", "reference_id": "VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-07-26T19:45:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2022-2097", "GHSA-3wx7-46ch-7rq2" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jfcp-evg4-8qd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97110?format=api", "vulnerability_id": "VCID-jkx1-qxrh-4feh", "summary": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96884", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96888", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96892", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180234", "reference_id": "1180234", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180234" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3571" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jkx1-qxrh-4feh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54074?format=api", "vulnerability_id": "VCID-jrts-kcz9-hbcf", "summary": "Integer Overflow or Wraparound\nCalls to `EVP_CipherUpdate`, `EVP_EncryptUpdate` and `EVP_DecryptUpdate` may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23840.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23840.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23840", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00463", "scoring_system": "epss", "scoring_elements": "0.64641", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00463", "scoring_system": "epss", "scoring_elements": "0.64681", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00463", "scoring_system": "epss", "scoring_elements": "0.64683", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00463", "scoring_system": "epss", "scoring_elements": "0.64692", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23840" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10366", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10366" }, { "reference_url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0057.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0057.html" }, { "reference_url": "https://security.gentoo.org/glsa/202103-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://security.gentoo.org/glsa/202103-03" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210219-0009", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210219-0009" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4855", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.debian.org/security/2021/dsa-4855" }, { "reference_url": "https://www.openssl.org/news/secadv/20210216.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.openssl.org/news/secadv/20210216.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "reference_url": "https://www.oracle.com//security-alerts/cpujul2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.tenable.com/security/tns-2021-03" }, { "reference_url": "https://www.tenable.com/security/tns-2021-09", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.tenable.com/security/tns-2021-09" }, { "reference_url": "https://www.tenable.com/security/tns-2021-10", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://www.tenable.com/security/tns-2021-10" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930324", "reference_id": "1930324", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930324" }, { "reference_url": "https://security.archlinux.org/ASA-202102-42", "reference_id": "ASA-202102-42", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-42" }, { "reference_url": "https://security.archlinux.org/AVG-1581", "reference_id": "AVG-1581", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1581" }, { "reference_url": "https://security.archlinux.org/AVG-1605", "reference_id": "AVG-1605", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1605" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23840", "reference_id": "CVE-2021-23840", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23840" }, { "reference_url": "https://github.com/advisories/GHSA-qgm6-9472-pwq7", "reference_id": "GHSA-qgm6-9472-pwq7", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-qgm6-9472-pwq7" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210219-0009/", "reference_id": "ntap-20210219-0009", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210219-0009/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2" }, { "reference_url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E", "reference_id": "r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E", "reference_id": "rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:12:28Z/" } ], "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3798", "reference_id": "RHSA-2021:3798", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3798" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4198", "reference_id": "RHSA-2021:4198", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4198" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4424", "reference_id": "RHSA-2021:4424", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4424" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4613", "reference_id": "RHSA-2021:4613", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4613" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4614", "reference_id": "RHSA-2021:4614", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4614" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4861", "reference_id": "RHSA-2021:4861", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4861" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4863", "reference_id": "RHSA-2021:4863", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4863" }, { "reference_url": "https://usn.ubuntu.com/4738-1/", "reference_id": "USN-4738-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4738-1/" }, { "reference_url": "https://usn.ubuntu.com/5088-1/", "reference_id": "USN-5088-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5088-1/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-23840", "GHSA-qgm6-9472-pwq7" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jrts-kcz9-hbcf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45690?format=api", "vulnerability_id": "VCID-ju5y-bakm-mqd8", "summary": "Inefficient Regular Expression Complexity\nIssue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. One of those\nchecks confirms that the modulus ('p' parameter) is not too large. Trying to use\na very large modulus is slow and OpenSSL will not normally use a modulus which\nis over 10,000 bits in length.\n\nHowever the DH_check() function checks numerous aspects of the key or parameters\nthat have been supplied. Some of those checks use the supplied modulus value\neven if it has already been found to be too large.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulernable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the '-check' option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3446.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3446.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-3446", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01027", "scoring_system": "epss", "scoring_elements": "0.77663", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.01027", "scoring_system": "epss", "scoring_elements": "0.77665", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01027", "scoring_system": "epss", "scoring_elements": "0.77673", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-3446" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3446" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1fa20cf2f506113c761777127a38bce5068740eb" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8780a896543a654e757db1b9396383f9d8095528" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9a0a4d3c1e7138915563c0df4fe6a3f9377b839c" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fc9867c1e03c22ebf56943be205202e576aabf23" }, { "reference_url": "https://www.openssl.org/news/secadv/20230719.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:22Z/" } ], "url": "https://www.openssl.org/news/secadv/20230719.txt" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2023/07/19/4", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2023/07/19/4" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2023/07/19/5", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2023/07/19/5" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2023/07/19/6", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2023/07/19/6" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041817", "reference_id": "1041817", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041817" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224962", "reference_id": "2224962", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2224962" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446", "reference_id": "CVE-2023-3446", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3446" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7877", "reference_id": "RHSA-2023:7877", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7877" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0154", "reference_id": "RHSA-2024:0154", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0154" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0208", "reference_id": "RHSA-2024:0208", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0208" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0408", "reference_id": "RHSA-2024:0408", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0408" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0888", "reference_id": "RHSA-2024:0888", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0888" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:1415", "reference_id": "RHSA-2024:1415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:1415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2264", "reference_id": "RHSA-2024:2264", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2264" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2447", "reference_id": "RHSA-2024:2447", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2447" }, { "reference_url": "https://usn.ubuntu.com/6435-1/", "reference_id": "USN-6435-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6435-1/" }, { "reference_url": "https://usn.ubuntu.com/6435-2/", "reference_id": "USN-6435-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6435-2/" }, { "reference_url": "https://usn.ubuntu.com/6450-1/", "reference_id": "USN-6450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6450-1/" }, { "reference_url": "https://usn.ubuntu.com/6709-1/", "reference_id": "USN-6709-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6709-1/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-3446" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ju5y-bakm-mqd8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97142?format=api", "vulnerability_id": "VCID-jwuq-ek5h-p7eh", "summary": "The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1793.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1793", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.76307", "scoring_system": "epss", "scoring_elements": "0.98951", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.76307", "scoring_system": "epss", "scoring_elements": "0.98953", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.76307", "scoring_system": "epss", "scoring_elements": "0.98955", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.76449", "scoring_system": "epss", "scoring_elements": "0.98959", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1793" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1793", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1793" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238619", "reference_id": "1238619", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1238619" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/38640.rb", "reference_id": "CVE-2015-1793;OSVDB-124300", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/38640.rb" }, { "reference_url": "https://security.gentoo.org/glsa/201507-15", "reference_id": "GLSA-201507-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201507-15" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1793" ], "risk_score": 1.4, "exploitability": "2.0", "weighted_severity": "0.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jwuq-ek5h-p7eh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97196?format=api", "vulnerability_id": "VCID-k1h8-rvw8-qkby", "summary": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1559.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1559", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0496", "scoring_system": "epss", "scoring_elements": "0.89841", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0496", "scoring_system": "epss", "scoring_elements": "0.89856", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0496", "scoring_system": "epss", "scoring_elements": "0.89857", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0496", "scoring_system": "epss", "scoring_elements": "0.89855", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1559" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1559", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1559" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1683804", "reference_id": "1683804", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1683804" }, { "reference_url": "https://security.gentoo.org/glsa/201903-10", "reference_id": "GLSA-201903-10", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201903-10" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2304", "reference_id": "RHSA-2019:2304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2437", "reference_id": "RHSA-2019:2437", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2439", "reference_id": "RHSA-2019:2439", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2439" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2471", "reference_id": "RHSA-2019:2471", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2471" }, { "reference_url": "https://usn.ubuntu.com/3899-1/", "reference_id": "USN-3899-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3899-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2019-1559" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k1h8-rvw8-qkby" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6784?format=api", "vulnerability_id": "VCID-k4k5-uhxu-gyc1", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2179.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.18101", "scoring_system": "epss", "scoring_elements": "0.95308", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.18101", "scoring_system": "epss", "scoring_elements": "0.95313", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.18101", "scoring_system": "epss", "scoring_elements": "0.95301", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.18101", "scoring_system": "epss", "scoring_elements": "0.9531", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369504", "reference_id": "1369504", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1369504" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2179" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k4k5-uhxu-gyc1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/77509?format=api", "vulnerability_id": "VCID-k8cj-882g-sfac", "summary": "Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0739.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0739", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.14445", "scoring_system": "epss", "scoring_elements": "0.94567", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.14445", "scoring_system": "epss", "scoring_elements": "0.94568", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.14445", "scoring_system": "epss", "scoring_elements": "0.94557", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.14445", "scoring_system": "epss", "scoring_elements": "0.94565", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0739" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0739", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0739" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561266", "reference_id": "1561266", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561266" }, { "reference_url": "https://security.archlinux.org/ASA-201804-2", "reference_id": "ASA-201804-2", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201804-2" }, { "reference_url": "https://security.archlinux.org/AVG-540", "reference_id": "AVG-540", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-540" }, { "reference_url": "https://security.gentoo.org/glsa/201811-21", "reference_id": "GLSA-201811-21", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-21" }, { "reference_url": "https://security.gentoo.org/glsa/202007-53", "reference_id": "GLSA-202007-53", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202007-53" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3090", "reference_id": "RHSA-2018:3090", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3090" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:3221", "reference_id": "RHSA-2018:3221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:3221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0366", "reference_id": "RHSA-2019:0366", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0366" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0367", "reference_id": "RHSA-2019:0367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1711", "reference_id": "RHSA-2019:1711", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1711" }, { "reference_url": "https://usn.ubuntu.com/3611-1/", "reference_id": "USN-3611-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3611-1/" }, { "reference_url": "https://usn.ubuntu.com/3611-2/", "reference_id": "USN-3611-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3611-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2018-0739" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k8cj-882g-sfac" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97104?format=api", "vulnerability_id": "VCID-k9fk-ygea-9bf1", "summary": "Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97322", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97326", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97327", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97328", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152953", "reference_id": "1152953", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152953" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1652", "reference_id": "RHSA-2014:1652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1692", "reference_id": "RHSA-2014:1692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1692" }, { "reference_url": "https://usn.ubuntu.com/2385-1/", "reference_id": "USN-2385-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2385-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3513" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k9fk-ygea-9bf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97133?format=api", "vulnerability_id": "VCID-ke5z-ndd2-duhm", "summary": "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91295", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91307", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91308", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91304", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0292" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202395", "reference_id": "1202395", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202395" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0292" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ke5z-ndd2-duhm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97093?format=api", "vulnerability_id": "VCID-kpyv-ydcz-1qev", "summary": "OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99584", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99585", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99586", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103586", "reference_id": "1103586", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103586" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0624", "reference_id": "RHSA-2014:0624", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0624" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0626", "reference_id": "RHSA-2014:0626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0626" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0627", "reference_id": "RHSA-2014:0627", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0627" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0629", "reference_id": "RHSA-2014:0629", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0629" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0630", "reference_id": "RHSA-2014:0630", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0630" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0631", "reference_id": "RHSA-2014:0631", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0631" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0632", "reference_id": "RHSA-2014:0632", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0632" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0633", "reference_id": "RHSA-2014:0633", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0633" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0680", "reference_id": "RHSA-2014:0680", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0680" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0224" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kpyv-ydcz-1qev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6776?format=api", "vulnerability_id": "VCID-m4ms-vh59-ufbd", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6306.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0887", "scoring_system": "epss", "scoring_elements": "0.92713", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0887", "scoring_system": "epss", "scoring_elements": "0.92704", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0887", "scoring_system": "epss", "scoring_elements": "0.92701", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0887", "scoring_system": "epss", "scoring_elements": "0.92709", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6306" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.9", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594", "reference_id": "1377594", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377594" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-6306" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4ms-vh59-ufbd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97097?format=api", "vulnerability_id": "VCID-m4u4-7g9x-qbh5", "summary": "d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.51729", "scoring_system": "epss", "scoring_elements": "0.97952", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.51729", "scoring_system": "epss", "scoring_elements": "0.97955", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127500", "reference_id": "1127500", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127500" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3506" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4u4-7g9x-qbh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97098?format=api", "vulnerability_id": "VCID-megu-ghcn-83ez", "summary": "Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98532", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98535", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98534", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127502", "reference_id": "1127502", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127502" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3507" ], "risk_score": 0.3, "exploitability": "0.5", "weighted_severity": "0.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-megu-ghcn-83ez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44701?format=api", "vulnerability_id": "VCID-mnkq-e45g-fyfw", "summary": "Improper Certificate Validation\nA security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems. Policy processing is disabled by default but can be enabled by passing the `-policy' argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()' function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0464.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0464.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0464", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00734", "scoring_system": "epss", "scoring_elements": "0.73134", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00734", "scoring_system": "epss", "scoring_elements": "0.7316", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00734", "scoring_system": "epss", "scoring_elements": "0.73172", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00734", "scoring_system": "epss", "scoring_elements": "0.73178", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0464" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0464" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0465" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2650" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1" }, { "reference_url": "https://www.openssl.org/news/secadv/20230322.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://www.openssl.org/news/secadv/20230322.txt" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720", "reference_id": "1034720", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034720" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2181082", "reference_id": "2181082", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2181082" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0464", "reference_id": "CVE-2023-0464", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0464" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:32Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3722", "reference_id": "RHSA-2023:3722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://usn.ubuntu.com/6039-1/", "reference_id": "USN-6039-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6039-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-0464" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mnkq-e45g-fyfw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97144?format=api", "vulnerability_id": "VCID-mnsf-z11p-7qhk", "summary": "The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by the BN_mod_exp function, mishandles carry propagation and produces incorrect output, which makes it easier for remote attackers to obtain sensitive private-key information via an attack against use of a (1) Diffie-Hellman (DH) or (2) Diffie-Hellman Ephemeral (DHE) ciphersuite.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3193.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3193", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.27511", "scoring_system": "epss", "scoring_elements": "0.96518", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.27511", "scoring_system": "epss", "scoring_elements": "0.9652", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.27511", "scoring_system": "epss", "scoring_elements": "0.96525", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3193" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3193" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288317", "reference_id": "1288317", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288317" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3193" ], "risk_score": 0.7, "exploitability": "0.5", "weighted_severity": "1.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mnsf-z11p-7qhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5286?format=api", "vulnerability_id": "VCID-n1r2-zqmn-2ufh", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3711.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3711.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3711", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02544", "scoring_system": "epss", "scoring_elements": "0.85748", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02544", "scoring_system": "epss", "scoring_elements": "0.85769", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.02544", "scoring_system": "epss", "scoring_elements": "0.85772", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02544", "scoring_system": "epss", "scoring_elements": "0.8577", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3711" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=59f5e75f3bced8fc0e130d72a3f582cf7b480b46" }, { "reference_url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0097.html" }, { "reference_url": "https://security.gentoo.org/glsa/202209-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202209-02" }, { "reference_url": "https://security.gentoo.org/glsa/202210-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/202210-02" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210827-0010", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210827-0010" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20211022-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20211022-0003" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4963", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2021/dsa-4963" }, { "reference_url": "https://www.openssl.org/news/secadv/20210824.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.openssl.org/news/secadv/20210824.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-16", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2021-16" }, { "reference_url": "https://www.tenable.com/security/tns-2022-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2022-02" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/08/26/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995623", "reference_id": "1995623", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995623" }, { "reference_url": "https://security.archlinux.org/AVG-2315", "reference_id": "AVG-2315", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2315" }, { "reference_url": "https://security.archlinux.org/AVG-2316", "reference_id": "AVG-2316", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2316" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711", "reference_id": "CVE-2021-3711", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3711" }, { "reference_url": "https://github.com/advisories/GHSA-5ww6-px42-wc85", "reference_id": "GHSA-5ww6-px42-wc85", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5ww6-px42-wc85" }, { "reference_url": "https://usn.ubuntu.com/5051-1/", "reference_id": "USN-5051-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5051-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-3711", "GHSA-5ww6-px42-wc85" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n1r2-zqmn-2ufh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97189?format=api", "vulnerability_id": "VCID-n5d8-zmzf-eube", "summary": "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5407.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00844", "scoring_system": "epss", "scoring_elements": "0.75138", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00844", "scoring_system": "epss", "scoring_elements": "0.75168", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00844", "scoring_system": "epss", "scoring_elements": "0.75171", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00844", "scoring_system": "epss", "scoring_elements": "0.75164", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-5407" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0735" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0737" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5407" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695", "reference_id": "1645695", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695" }, { "reference_url": "https://github.com/bbbrumley/portsmash/tree/e3e7447ba04e1a8a5637cabadf3403faf94f7a56", "reference_id": "CVE-2018-5407", "reference_type": "exploit", "scores": [], "url": "https://github.com/bbbrumley/portsmash/tree/e3e7447ba04e1a8a5637cabadf3403faf94f7a56" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/local/45785.md", "reference_id": "CVE-2018-5407", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/local/45785.md" }, { "reference_url": "https://security.gentoo.org/glsa/201903-10", "reference_id": "GLSA-201903-10", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201903-10" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:0483", "reference_id": "RHSA-2019:0483", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:0483" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2125", "reference_id": "RHSA-2019:2125", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:2125" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3932", "reference_id": "RHSA-2019:3932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3933", "reference_id": "RHSA-2019:3933", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3935", "reference_id": "RHSA-2019:3935", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3935" }, { "reference_url": "https://usn.ubuntu.com/3840-1/", "reference_id": "USN-3840-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3840-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2018-5407" ], "risk_score": 8.6, "exploitability": "2.0", "weighted_severity": "4.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n5d8-zmzf-eube" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97174?format=api", "vulnerability_id": "VCID-n74y-fd83-ybem", "summary": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8610.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8610", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.71356", "scoring_system": "epss", "scoring_elements": "0.98738", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.71356", "scoring_system": "epss", "scoring_elements": "0.98739", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8610" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743", "reference_id": "1384743", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0286", "reference_id": "RHSA-2017:0286", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0286" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0574", "reference_id": "RHSA-2017:0574", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0574" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1413", "reference_id": "RHSA-2017:1413", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1413" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1414", "reference_id": "RHSA-2017:1414", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1414" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1415", "reference_id": "RHSA-2017:1415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1658", "reference_id": "RHSA-2017:1658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1659", "reference_id": "RHSA-2017:1659", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1659" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" }, { "reference_url": "https://usn.ubuntu.com/3183-1/", "reference_id": "USN-3183-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3183-1/" }, { "reference_url": "https://usn.ubuntu.com/3183-2/", "reference_id": "USN-3183-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3183-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-8610" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n74y-fd83-ybem" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97146?format=api", "vulnerability_id": "VCID-nasm-fjhp-9beh", "summary": "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.87787", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.87808", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.8781", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288322", "reference_id": "1288322", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288322" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2616", "reference_id": "RHSA-2015:2616", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2616" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3195" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nasm-fjhp-9beh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97147?format=api", "vulnerability_id": "VCID-nbqq-cyvt-y7hj", "summary": "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91825", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91838", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91839", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91836", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3196" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288326", "reference_id": "1288326", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288326" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3196" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqq-cyvt-y7hj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97095?format=api", "vulnerability_id": "VCID-nf4z-1rdg-5kbu", "summary": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91395", "scoring_system": "epss", "scoring_elements": "0.99677", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.91395", "scoring_system": "epss", "scoring_elements": "0.99678", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3470" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103600", "reference_id": "1103600", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103600" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3470" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nf4z-1rdg-5kbu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42671?format=api", "vulnerability_id": "VCID-nqu1-ffyz-wubt", "summary": "Loop with Unreachable Exit Condition ('Infinite Loop')\nThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters", "references": [ { "reference_url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "http://packetstormsecurity.com/files/167344/OpenSSL-1.0.2-1.1.1-3.0-BN_mod_sqrt-Infinite-Loop.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0778.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0778", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07539", "scoring_system": "epss", "scoring_elements": "0.91961", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07539", "scoring_system": "epss", "scoring_elements": "0.91972", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.07539", "scoring_system": "epss", "scoring_elements": "0.91974", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07539", "scoring_system": "epss", "scoring_elements": "0.91973", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-0778" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-712929.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778" }, { "reference_url": "http://seclists.org/fulldisclosure/2022/May/33", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "http://seclists.org/fulldisclosure/2022/May/33" }, { "reference_url": "http://seclists.org/fulldisclosure/2022/May/35", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "http://seclists.org/fulldisclosure/2022/May/35" }, { "reference_url": "http://seclists.org/fulldisclosure/2022/May/38", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "http://seclists.org/fulldisclosure/2022/May/38" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3118eb64934499d93db3230748a452351d1d9a65" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=380085481c64de749a6dd25cdf0bcf4360b30f83" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=a466912611aa6cbdf550cd10601390e587451246" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb64934499d93db3230748a452351d1d9a65" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=380085481c64de749a6dd25cdf0bcf4360b30f83" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a466912611aa6cbdf550cd10601390e587451246" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00024.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0002" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2022-0014.html" }, { "reference_url": "https://security.gentoo.org/glsa/202210-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://security.gentoo.org/glsa/202210-02" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220321-0002", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20220321-0002" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220321-0002/", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20220321-0002/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220429-0005", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20220429-0005" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://support.apple.com/kb/HT213255", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://support.apple.com/kb/HT213255" }, { "reference_url": "https://support.apple.com/kb/HT213256", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://support.apple.com/kb/HT213256" }, { "reference_url": "https://support.apple.com/kb/HT213257", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://support.apple.com/kb/HT213257" }, { "reference_url": "https://www.debian.org/security/2022/dsa-5103", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.debian.org/security/2022/dsa-5103" }, { "reference_url": "https://www.openssl.org/news/secadv/20220315.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.openssl.org/news/secadv/20220315.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "reference_url": "https://www.tenable.com/security/tns-2022-06", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.tenable.com/security/tns-2022-06" }, { "reference_url": "https://www.tenable.com/security/tns-2022-07", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.tenable.com/security/tns-2022-07" }, { "reference_url": "https://www.tenable.com/security/tns-2022-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.tenable.com/security/tns-2022-08" }, { "reference_url": "https://www.tenable.com/security/tns-2022-09", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://www.tenable.com/security/tns-2022-09" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202", "reference_id": "2062202", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2062202" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/", "reference_id": "323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/323SNN6ZX7PRJJWP2BUAFLPUAE42XWLZ/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778", "reference_id": "CVE-2022-0778", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0778" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/", "reference_id": "GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GDB3GQVJPXJE7X5C5JN6JAA4XUDWD6E6/" }, { "reference_url": "https://github.com/advisories/GHSA-x3mh-jvjw-3xwx", "reference_id": "GHSA-x3mh-jvjw-3xwx", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x3mh-jvjw-3xwx" }, { "reference_url": "https://security.gentoo.org/glsa/202405-29", "reference_id": "GLSA-202405-29", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202405-29" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20220429-0005/", "reference_id": "ntap-20220429-0005", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20220429-0005/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1065", "reference_id": "RHSA-2022:1065", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1065" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1066", "reference_id": "RHSA-2022:1066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1071", "reference_id": "RHSA-2022:1071", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1071" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1073", "reference_id": "RHSA-2022:1073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1076", "reference_id": "RHSA-2022:1076", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1076" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1077", "reference_id": "RHSA-2022:1077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1078", "reference_id": "RHSA-2022:1078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1082", "reference_id": "RHSA-2022:1082", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1082" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1091", "reference_id": "RHSA-2022:1091", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1091" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1112", "reference_id": "RHSA-2022:1112", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1112" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1263", "reference_id": "RHSA-2022:1263", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1263" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1389", "reference_id": "RHSA-2022:1389", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1389" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1390", "reference_id": "RHSA-2022:1390", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1390" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1519", "reference_id": "RHSA-2022:1519", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1519" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1520", "reference_id": "RHSA-2022:1520", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1520" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:4896", "reference_id": "RHSA-2022:4896", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:4896" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:4899", "reference_id": "RHSA-2022:4899", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:4899" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:4956", "reference_id": "RHSA-2022:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:5326", "reference_id": "RHSA-2022:5326", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:5326" }, { "reference_url": "https://usn.ubuntu.com/5328-1/", "reference_id": "USN-5328-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5328-1/" }, { "reference_url": "https://usn.ubuntu.com/5328-2/", "reference_id": "USN-5328-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5328-2/" }, { "reference_url": "https://usn.ubuntu.com/6457-1/", "reference_id": "USN-6457-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6457-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/", "reference_id": "W6K3PR542DXWLEFFMFIDMME4CWMHJRMG", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-22T13:27:14Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6K3PR542DXWLEFFMFIDMME4CWMHJRMG/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2022-0778", "GHSA-x3mh-jvjw-3xwx" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nqu1-ffyz-wubt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97113?format=api", "vulnerability_id": "VCID-nyxa-6hvt-3udy", "summary": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.95826", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.9583", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.95833", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228611", "reference_id": "1228611", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228611" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" } ], "aliases": [ "CVE-2014-8176" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nyxa-6hvt-3udy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97190?format=api", "vulnerability_id": "VCID-p43p-ps85-vfd1", "summary": "ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if it is less than 12 bytes. However it also incorrectly allows a nonce to be set of up to 16 bytes. In this case only the last 12 bytes are significant and any additional leading bytes are ignored. It is a requirement of using this cipher that nonce values are unique. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. If an application changes the default nonce length to be longer than 12 bytes and then makes a change to the leading bytes of the nonce expecting the new value to be a new unique nonce then such an application could inadvertently encrypt messages with a reused nonce. Additionally the ignored bytes in a long nonce are not covered by the integrity guarantee of this cipher. Any application that relies on the integrity of these ignored leading bytes of a long nonce may be further affected. Any OpenSSL internal use of this cipher, including in SSL/TLS, is safe because no such use sets such a long nonce value. However user applications that use this cipher directly and set a non-default nonce length to be longer than 12 bytes may be vulnerable. OpenSSL versions 1.1.1 and 1.1.0 are affected by this issue. Due to the limited scope of affected deployments this has been assessed as low severity and therefore we are not creating new releases at this time. Fixed in OpenSSL 1.1.1c (Affected 1.1.1-1.1.1b). Fixed in OpenSSL 1.1.0k (Affected 1.1.0-1.1.0j).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1543.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1543", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03184", "scoring_system": "epss", "scoring_elements": "0.87225", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.03184", "scoring_system": "epss", "scoring_elements": "0.87207", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03184", "scoring_system": "epss", "scoring_elements": "0.8723", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03184", "scoring_system": "epss", "scoring_elements": "0.87227", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1543" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1543" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695954", "reference_id": "1695954", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695954" }, { "reference_url": "https://security.archlinux.org/ASA-201906-6", "reference_id": "ASA-201906-6", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201906-6" }, { "reference_url": "https://security.archlinux.org/ASA-201906-7", "reference_id": "ASA-201906-7", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201906-7" }, { "reference_url": "https://security.archlinux.org/AVG-919", "reference_id": "AVG-919", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-919" }, { "reference_url": "https://security.archlinux.org/AVG-920", "reference_id": "AVG-920", "reference_type": "", "scores": [ { "value": "Low", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-920" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:3700", "reference_id": "RHSA-2019:3700", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:3700" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2019-1543" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-p43p-ps85-vfd1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97109?format=api", "vulnerability_id": "VCID-pms8-rgdk-xbcn", "summary": "The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91801", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91813", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91816", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91814", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180240", "reference_id": "1180240", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180240" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0849", "reference_id": "RHSA-2015:0849", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3570" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pms8-rgdk-xbcn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97107?format=api", "vulnerability_id": "VCID-ppb8-ewtj-pqat", "summary": "OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89536", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89554", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89553", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89551", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3568" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152967", "reference_id": "1152967", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152967" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3568" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ppb8-ewtj-pqat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97191?format=api", "vulnerability_id": "VCID-qpwm-n2zh-rffm", "summary": "Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have the cofactor present. This can occur even where all the parameters match a known named curve. If such a curve is used then OpenSSL falls back to non-side channel resistant code paths which may result in full key recovery during an ECDSA signature operation. In order to be vulnerable an attacker would have to have the ability to time the creation of a large number of signatures where explicit parameters with no co-factor present are in use by an application using libcrypto. For the avoidance of doubt libssl is not vulnerable because explicit parameters are never used. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1547.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1547", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49618", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49546", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49608", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.496", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1547" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1547", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1547" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1563", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1563" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://seclists.org/bugtraq/2019/Oct/0", "reference_id": "0", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://seclists.org/bugtraq/2019/Oct/0" }, { "reference_url": "https://seclists.org/bugtraq/2019/Oct/1", "reference_id": "1", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://seclists.org/bugtraq/2019/Oct/1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752090", "reference_id": "1752090", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752090" }, { "reference_url": "https://arxiv.org/abs/1909.01785", "reference_id": "1909.01785", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://arxiv.org/abs/1909.01785" }, { "reference_url": "https://www.openssl.org/news/secadv/20190910.txt", "reference_id": "20190910.txt", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://www.openssl.org/news/secadv/20190910.txt" }, { "reference_url": "https://seclists.org/bugtraq/2019/Sep/25", "reference_id": "25", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://seclists.org/bugtraq/2019/Sep/25" }, { "reference_url": "https://usn.ubuntu.com/4376-1/", "reference_id": "4376-1", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://usn.ubuntu.com/4376-1/" }, { "reference_url": "https://usn.ubuntu.com/4376-2/", "reference_id": "4376-2", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://usn.ubuntu.com/4376-2/" }, { "reference_url": "https://usn.ubuntu.com/4504-1/", "reference_id": "4504-1", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://usn.ubuntu.com/4504-1/" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4539", "reference_id": "dsa-4539", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://www.debian.org/security/2019/dsa-4539" }, { "reference_url": "https://www.debian.org/security/2019/dsa-4540", "reference_id": "dsa-4540", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://www.debian.org/security/2019/dsa-4540" }, { "reference_url": "https://security.gentoo.org/glsa/201911-04", "reference_id": "GLSA-201911-04", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://security.gentoo.org/glsa/201911-04" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/", "reference_id": "GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6SNRJP2S7Y42GIIDO3HXPNMDYN2U3A/" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10365", "reference_id": "index?page=content&id=SB10365", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10365" }, { "reference_url": "https://support.f5.com/csp/article/K73422160?utm_source=f5support&%3Butm_medium=RSS", "reference_id": "K73422160?utm_source=f5support&%3Butm_medium=RSS", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://support.f5.com/csp/article/K73422160?utm_source=f5support&%3Butm_medium=RSS" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html", "reference_id": "msg00012.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00012.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html", "reference_id": "msg00016.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00016.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html", "reference_id": "msg00026.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/09/msg00026.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html", "reference_id": "msg00054.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00054.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html", "reference_id": "msg00072.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00072.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20190919-0002/", "reference_id": "ntap-20190919-0002", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20190919-0002/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200122-0002/", "reference_id": "ntap-20200122-0002", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200122-0002/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0003/", "reference_id": "ntap-20200416-0003", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0003/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=21c856b75d81eff61aa63b4f036bb64a85bf6d46" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30c22fa8b1d840036b8e203585738df62a03cec8" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7c1709c2da5414f5b6133d00a03fc8c5bf996c7a" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1336", "reference_id": "RHSA-2020:1336", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1336" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1337", "reference_id": "RHSA-2020:1337", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1337" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1840", "reference_id": "RHSA-2020:1840", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1840" }, { "reference_url": "http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html", "reference_id": "Slackware-Security-Advisory-openssl-Updates.html", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "http://packetstormsecurity.com/files/154467/Slackware-Security-Advisory-openssl-Updates.html" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/", "reference_id": "ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-19T19:04:18Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZN4VVQJ3JDCHGIHV4Y2YTXBYQZ6PWQ7E/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2019-1547" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qpwm-n2zh-rffm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97137?format=api", "vulnerability_id": "VCID-qxy5-81tu-cuh4", "summary": "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94879", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94887", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94889", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228600", "reference_id": "1228600", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228600" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1788" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxy5-81tu-cuh4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68070?format=api", "vulnerability_id": "VCID-r9en-es5m-t3gs", "summary": "openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69421.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69421.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69421", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00128", "scoring_system": "epss", "scoring_elements": "0.31672", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00128", "scoring_system": "epss", "scoring_elements": "0.31743", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00128", "scoring_system": "epss", "scoring_elements": "0.3171", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69421" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69421" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387", "reference_id": "2430387", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430387" }, { "reference_url": "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b", "reference_id": "3524a29271f8191b8fd8a5257eb05173982a097b", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://github.com/openssl/openssl/commit/3524a29271f8191b8fd8a5257eb05173982a097b" }, { "reference_url": "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7", "reference_id": "36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://github.com/openssl/openssl/commit/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7" }, { "reference_url": "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd", "reference_id": "4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://github.com/openssl/openssl/commit/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd" }, { "reference_url": "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3", "reference_id": "643986985cd1c21221f941129d76fe0c2785aeb3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://github.com/openssl/openssl/commit/643986985cd1c21221f941129d76fe0c2785aeb3" }, { "reference_url": "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c", "reference_id": "a2dbc539f0f9cc63832709fa5aa33ad9495eb19c", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T15:17:58Z/" } ], "url": "https://github.com/openssl/openssl/commit/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-69421" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-r9en-es5m-t3gs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/66477?format=api", "vulnerability_id": "VCID-rd79-vcxq-uuex", "summary": "Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-13176.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-13176.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-13176", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22766", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22827", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22812", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-13176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-13176" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844", "reference_id": "07272b05b04836a762b4baa874958af51d513844", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/07272b05b04836a762b4baa874958af51d513844" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded", "reference_id": "0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/0d5fd1ab987f7571e2c955d8d8b638fc0fb54ded" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094027", "reference_id": "1094027", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094027" }, { "reference_url": "https://openssl-library.org/news/secadv/20250120.txt", "reference_id": "20250120.txt", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://openssl-library.org/news/secadv/20250120.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2338999", "reference_id": "2338999", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2338999" }, { "reference_url": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467", "reference_id": "2af62e74fb59bc469506bc37eb2990ea408d9467", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/2af62e74fb59bc469506bc37eb2990ea408d9467" }, { "reference_url": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902", "reference_id": "392dcb336405a0c94486aa6655057f59fd3a0902", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/392dcb336405a0c94486aa6655057f59fd3a0902" }, { "reference_url": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65", "reference_id": "4b1cb94a734a7d4ec363ac0a215a25c181e11f65", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/4b1cb94a734a7d4ec363ac0a215a25c181e11f65" }, { "reference_url": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f", "reference_id": "77c608f4c8857e63e98e66444e2e761c9627916f", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/77c608f4c8857e63e98e66444e2e761c9627916f" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86", "reference_id": "a2639000db19878d5d89586ae7b725080592ae86", "reference_type": "", "scores": [ { "value": "4.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T20:21:21Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/a2639000db19878d5d89586ae7b725080592ae86" }, { "reference_url": "https://usn.ubuntu.com/7264-1/", "reference_id": "USN-7264-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7264-1/" }, { "reference_url": "https://usn.ubuntu.com/7278-1/", "reference_id": "USN-7278-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7278-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-13176" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rd79-vcxq-uuex" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/53551?format=api", "vulnerability_id": "VCID-rhc6-smuj-uyfk", "summary": "Inadequate Encryption Strength\nThe Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-1968.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1968", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01042", "scoring_system": "epss", "scoring_elements": "0.77812", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.01042", "scoring_system": "epss", "scoring_elements": "0.77788", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01042", "scoring_system": "epss", "scoring_elements": "0.77815", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01042", "scoring_system": "epss", "scoring_elements": "0.77822", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-1968" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1968", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1968" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://www.openssl.org/news/secadv/20200909.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:10:30Z/" } ], "url": "https://www.openssl.org/news/secadv/20200909.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1877458", "reference_id": "1877458", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1877458" }, { "reference_url": "https://usn.ubuntu.com/4504-1/", "reference_id": "4504-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:10:30Z/" } ], "url": "https://usn.ubuntu.com/4504-1/" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1968", "reference_id": "CVE-2020-1968", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1968" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html", "reference_id": "msg00016.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:10:30Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/09/msg00016.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200911-0004/", "reference_id": "ntap-20200911-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:10:30Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200911-0004/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2020-1968" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rhc6-smuj-uyfk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97089?format=api", "vulnerability_id": "VCID-rnz3-9s3x-9fhg", "summary": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0160", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94464", "scoring_system": "epss", "scoring_elements": "0.99996", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160" }, { "reference_url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html", "reference_id": "000184.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html" }, { "reference_url": "http://www.securitytracker.com/id/1030026", "reference_id": "1030026", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030026" }, { "reference_url": "http://www.securitytracker.com/id/1030074", "reference_id": "1030074", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030074" }, { "reference_url": "http://www.securitytracker.com/id/1030077", "reference_id": "1030077", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030077" }, { "reference_url": "http://www.securitytracker.com/id/1030078", "reference_id": "1030078", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030078" }, { "reference_url": "http://www.securitytracker.com/id/1030079", "reference_id": "1030079", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030079" }, { "reference_url": "http://www.securitytracker.com/id/1030080", "reference_id": "1030080", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030080" }, { "reference_url": "http://www.securitytracker.com/id/1030081", "reference_id": "1030081", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030081" }, { "reference_url": "http://www.securitytracker.com/id/1030082", "reference_id": "1030082", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030082" }, { "reference_url": "https://gist.github.com/chapmajs/10473815", "reference_id": "10473815", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://gist.github.com/chapmajs/10473815" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875", "reference_id": "1084875", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/109", "reference_id": "109", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/109" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html", "reference_id": "131221.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html", "reference_id": "131291.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html", "reference_id": "136473.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/173", "reference_id": "173", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/173" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/190", "reference_id": "190", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/190" }, { "reference_url": "http://www.exploit-db.com/exploits/32745", "reference_id": "32745", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.exploit-db.com/exploits/32745" }, { "reference_url": "http://www.exploit-db.com/exploits/32764", "reference_id": "32764", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.exploit-db.com/exploits/32764" }, { "reference_url": "http://secunia.com/advisories/57347", "reference_id": "57347", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57347" }, { "reference_url": "http://secunia.com/advisories/57483", "reference_id": "57483", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57483" }, { "reference_url": "http://secunia.com/advisories/57721", "reference_id": "57721", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57721" }, { "reference_url": "http://secunia.com/advisories/57836", "reference_id": "57836", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57836" }, { "reference_url": "http://secunia.com/advisories/57966", "reference_id": "57966", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57966" }, { "reference_url": "http://secunia.com/advisories/57968", "reference_id": "57968", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57968" }, { "reference_url": "http://secunia.com/advisories/59139", "reference_id": "59139", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59139" }, { "reference_url": "http://secunia.com/advisories/59243", "reference_id": "59243", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59243" }, { "reference_url": "http://secunia.com/advisories/59347", "reference_id": "59347", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59347" }, { "reference_url": "http://www.securityfocus.com/bid/66690", "reference_id": "66690", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securityfocus.com/bid/66690" }, { "reference_url": "http://www.kb.cert.org/vuls/id/720951", "reference_id": "720951", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.kb.cert.org/vuls/id/720951" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743883", "reference_id": "743883", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743883" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/90", "reference_id": "90", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/90" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/91", "reference_id": "91", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/91" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062", "reference_id": "advisories?name=MDVSA-2015:062", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/", "reference_id": "chef-server-11-0-12-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/", "reference_id": "chef-server-heartbleed-cve-2014-0160-releases", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/" }, { "reference_url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed", "reference_id": "cisco-sa-20140409-heartbleed", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed" }, { "reference_url": "http://support.citrix.com/article/CTX140605", "reference_id": "CTX140605", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://support.citrix.com/article/CTX140605" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32764.py", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32764.py" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32791.c", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32791.c" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32998.c", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32998.c" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32745.py", "reference_id": "CVE-2014-0346;OSVDB-105465;CVE-2014-0160", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32745.py" }, { "reference_url": "https://code.google.com/p/mod-spdy/issues/detail?id=85", "reference_id": "detail?id=85", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://code.google.com/p/mod-spdy/issues/detail?id=85" }, { "reference_url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "reference_id": "detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841", "reference_id": "docview.wss?uid=isg400001841", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843", "reference_id": "docview.wss?uid=isg400001843", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661", "reference_id": "docview.wss?uid=ssg1S1004661", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161", "reference_id": "docview.wss?uid=swg21670161", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161" }, { "reference_url": "http://www.debian.org/security/2014/dsa-2896", "reference_id": "dsa-2896", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.debian.org/security/2014/dsa-2896" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/", "reference_id": "enterprise-chef-11-1-3-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/", "reference_id": "enterprise-chef-1-4-9-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/" }, { "reference_url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E", "reference_id": "f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01", "reference_id": "files?p_Doc_Ref=SEVD%202014-119-01", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01" }, { "reference_url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1", "reference_id": "fsc-2014-1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1" }, { "reference_url": "https://security.gentoo.org/glsa/201404-07", "reference_id": "GLSA-201404-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201404-07" }, { "reference_url": "https://security.gentoo.org/glsa/201412-11", "reference_id": "GLSA-201412-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-11" }, { "reference_url": "http://heartbleed.com/", "reference_id": "heartbleed.com", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://heartbleed.com/" }, { "reference_url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html", "reference_id": "heartbleed-hearts-continue-to-bleed.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html" }, { "reference_url": "http://www.blackberry.com/btsc/KB35882", "reference_id": "KB35882", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.blackberry.com/btsc/KB35882" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2", "reference_id": "?l=bugtraq&m=139722163017074&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2", "reference_id": "?l=bugtraq&m=139757726426985&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2", "reference_id": "?l=bugtraq&m=139757819327350&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2", "reference_id": "?l=bugtraq&m=139757919027752&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2", "reference_id": "?l=bugtraq&m=139758572430452&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2", "reference_id": "?l=bugtraq&m=139765756720506&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2", "reference_id": "?l=bugtraq&m=139774054614965&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2", "reference_id": "?l=bugtraq&m=139774703817488&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2", "reference_id": "?l=bugtraq&m=139808058921905&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2", "reference_id": "?l=bugtraq&m=139817685517037&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2", "reference_id": "?l=bugtraq&m=139817727317190&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2", "reference_id": "?l=bugtraq&m=139817782017443&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2", "reference_id": "?l=bugtraq&m=139824923705461&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2", "reference_id": "?l=bugtraq&m=139824993005633&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2", "reference_id": "?l=bugtraq&m=139833395230364&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2", "reference_id": "?l=bugtraq&m=139835815211508&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2", "reference_id": "?l=bugtraq&m=139835844111589&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2", "reference_id": "?l=bugtraq&m=139836085512508&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2", "reference_id": "?l=bugtraq&m=139842151128341&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2", "reference_id": "?l=bugtraq&m=139843768401936&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2", "reference_id": "?l=bugtraq&m=139869720529462&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2", "reference_id": "?l=bugtraq&m=139869891830365&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2", "reference_id": "?l=bugtraq&m=139889113431619&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2", "reference_id": "?l=bugtraq&m=139889295732144&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2", "reference_id": "?l=bugtraq&m=139905202427693&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2", "reference_id": "?l=bugtraq&m=139905243827825&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2", "reference_id": "?l=bugtraq&m=139905295427946&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2", "reference_id": "?l=bugtraq&m=139905351928096&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2", "reference_id": "?l=bugtraq&m=139905405728262&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2", "reference_id": "?l=bugtraq&m=139905458328378&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2", "reference_id": "?l=bugtraq&m=139905653828999&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2", "reference_id": "?l=bugtraq&m=139905868529690&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2", "reference_id": "?l=bugtraq&m=140015787404650&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2", "reference_id": "?l=bugtraq&m=140075368411126&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2", "reference_id": "?l=bugtraq&m=140724451518351&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2", "reference_id": "?l=bugtraq&m=140752315422991&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2", "reference_id": "?l=bugtraq&m=141287864628122&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2" }, { "reference_url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf", "reference_id": "mdm_1.5.2.1_Release_Notes.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf" }, { "reference_url": "http://advisories.mageia.org/MGASA-2014-0165.html", "reference_id": "MGASA-2014-0165.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://advisories.mageia.org/MGASA-2014-0165.html" }, { "reference_url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008", "reference_id": "mitel-product-security-advisory-17-0008", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html", "reference_id": "msg00004.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html", "reference_id": "msg00005.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html", "reference_id": "msg00061.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html" }, { "reference_url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1", "reference_id": "NVD_Detail_Rpt.aspx?ID=1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1" }, { "reference_url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3", "reference_id": "NVD_Detail_Rpt.aspx?ID=3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3" }, { "reference_url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160", "reference_id": "openssl-bug-cve-2014-0160", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160" }, { "reference_url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/", "reference_id": "openssl-heartbleed-bug-live-blog", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/" }, { "reference_url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html", "reference_id": "opensslheartbleedcve-2014-0160-2188454.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html" }, { "reference_url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3", "reference_id": "?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3" }, { "reference_url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E", "reference_id": "re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "http://www.kerio.com/support/kerio-control/release-history", "reference_id": "release-history", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.kerio.com/support/kerio-control/release-history" }, { "reference_url": "http://cogentdatahub.com/ReleaseNotes.html", "reference_id": "ReleaseNotes.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://cogentdatahub.com/ReleaseNotes.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0376", "reference_id": "RHSA-2014:0376", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0376" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html", "reference_id": "RHSA-2014-0376.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0377", "reference_id": "RHSA-2014:0377", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0377" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html", "reference_id": "RHSA-2014-0377.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0378", "reference_id": "RHSA-2014:0378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0378" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html", "reference_id": "RHSA-2014-0378.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0396", "reference_id": "RHSA-2014:0396", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0396" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html", "reference_id": "RHSA-2014-0396.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd", "reference_id": "ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd" }, { "reference_url": "http://www.openssl.org/news/secadv_20140407.txt", "reference_id": "secadv_20140407.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.openssl.org/news/secadv_20140407.txt" }, { "reference_url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "reference_id": "SJHN-7RKGNM_R4_EN.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf" }, { "reference_url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html", "reference_id": "sol15159.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html" }, { "reference_url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217", "reference_id": "sol15159.html?sr=36517217", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217" }, { "reference_url": "http://www.splunk.com/view/SP-CAAAMB3", "reference_id": "SP-CAAAMB3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.splunk.com/view/SP-CAAAMB3" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf", "reference_id": "ssa-635659.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf" }, { "reference_url": "http://www.us-cert.gov/ncas/alerts/TA14-098A", "reference_id": "TA14-098A", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A" }, { "reference_url": "https://usn.ubuntu.com/2165-1/", "reference_id": "USN-2165-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2165-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2165-1", "reference_id": "USN-2165-1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2165-1" }, { "reference_url": "https://filezilla-project.org/versions.php?type=server", "reference_id": "versions.php?type=server", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://filezilla-project.org/versions.php?type=server" }, { "reference_url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_id": "Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" }, { "reference_url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html", "reference_id": "vulnerability788210.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0160" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rnz3-9s3x-9fhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97157?format=api", "vulnerability_id": "VCID-ruv6-s4td-dfbx", "summary": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96374", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96379", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96383", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311876", "reference_id": "1311876", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311876" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0798" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ruv6-s4td-dfbx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6785?format=api", "vulnerability_id": "VCID-rynq-d6tu-2ygg", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2178.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00189", "scoring_system": "epss", "scoring_elements": "0.40574", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00189", "scoring_system": "epss", "scoring_elements": "0.40549", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00189", "scoring_system": "epss", "scoring_elements": "0.40494", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00189", "scoring_system": "epss", "scoring_elements": "0.40576", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2179" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2180" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2181" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2182" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6302" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6303" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6306" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.2", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:H/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400", "reference_id": "1343400", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1343400" }, { "reference_url": "https://security.archlinux.org/ASA-201609-23", "reference_id": "ASA-201609-23", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-23" }, { "reference_url": "https://security.archlinux.org/ASA-201609-24", "reference_id": "ASA-201609-24", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201609-24" }, { "reference_url": "https://security.archlinux.org/AVG-29", "reference_id": "AVG-29", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-29" }, { "reference_url": "https://security.archlinux.org/AVG-30", "reference_id": "AVG-30", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-30" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1940", "reference_id": "RHSA-2016:1940", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1940" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0193", "reference_id": "RHSA-2017:0193", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0193" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0194", "reference_id": "RHSA-2017:0194", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0194" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1658", "reference_id": "RHSA-2017:1658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1659", "reference_id": "RHSA-2017:1659", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1659" }, { "reference_url": "https://usn.ubuntu.com/3087-1/", "reference_id": "USN-3087-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3087-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2178" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rynq-d6tu-2ygg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/46904?format=api", "vulnerability_id": "VCID-s9by-79q1-27d9", "summary": "Null pointer dereference in PKCS12 parsing\nIssue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-0727.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-0727.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-0727", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43258", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43244", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43267", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-0727" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-277137.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-277137.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-331112.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-331112.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0727" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs/commit/add20f73b6b42be7451af2e1044d4e0e778992b2" }, { "reference_url": "https://github.com/github/advisory-database/pull/3472", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/github/advisory-database/pull/3472" }, { "reference_url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/09df4395b5071217b76dc7d3d2e630eb8c5a79c2" }, { "reference_url": "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/775acfdbd0c6af9ac855f34969cdab0c0c90844a" }, { "reference_url": "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://github.com/openssl/openssl/commit/d135eeab8a5dbf72b3da5240bab9ddb7678dbd2c" }, { "reference_url": "https://github.com/openssl/openssl/pull/23362", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/openssl/openssl/pull/23362" }, { "reference_url": "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography/commit/3519591d255d4506fbcd0d04037d45271903c64d" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/03b3941d60c4bce58fab69a0c22377ab439bc0e8" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/aebaa5883e31122b404e450732dc833dc9dee539" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00033.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00000.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240208-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240208-0006" }, { "reference_url": "https://www.openssl.org/news/secadv/20240125.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-08T20:15:21Z/" } ], "url": "https://www.openssl.org/news/secadv/20240125.txt" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2024/03/11/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.openwall.com/lists/oss-security/2024/03/11/1" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061582", "reference_id": "1061582", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061582" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259944", "reference_id": "2259944", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2259944" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727", "reference_id": "CVE-2024-0727", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0727" }, { "reference_url": "https://github.com/advisories/GHSA-9v9h-cgj8-h64p", "reference_id": "GHSA-9v9h-cgj8-h64p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-9v9h-cgj8-h64p" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2447", "reference_id": "RHSA-2024:2447", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2447" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9088", "reference_id": "RHSA-2024:9088", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9088" }, { "reference_url": "https://usn.ubuntu.com/6622-1/", "reference_id": "USN-6622-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6622-1/" }, { "reference_url": "https://usn.ubuntu.com/6632-1/", "reference_id": "USN-6632-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6632-1/" }, { "reference_url": "https://usn.ubuntu.com/6709-1/", "reference_id": "USN-6709-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6709-1/" }, { "reference_url": "https://usn.ubuntu.com/7018-1/", "reference_id": "USN-7018-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7018-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-0727", "GHSA-9v9h-cgj8-h64p" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s9by-79q1-27d9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97178?format=api", "vulnerability_id": "VCID-smvv-rrba-qqa5", "summary": "There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 before 1.1.0d. No EC algorithms are affected. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be very significant and likely only accessible to a limited number of attackers. An attacker would additionally need online access to an unpatched system using the target private key in a scenario with persistent DH parameters and a private key that is shared between multiple clients. For example this can occur by default in OpenSSL DHE based SSL/TLS ciphersuites. Note: This issue is very similar to CVE-2015-3193 but must be treated as a separate problem.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3732.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3732", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05182", "scoring_system": "epss", "scoring_elements": "0.90094", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.05182", "scoring_system": "epss", "scoring_elements": "0.90081", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05182", "scoring_system": "epss", "scoring_elements": "0.90097", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.05182", "scoring_system": "epss", "scoring_elements": "0.90096", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3732" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856", "reference_id": "1416856", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1416856" }, { "reference_url": "https://security.archlinux.org/ASA-201701-36", "reference_id": "ASA-201701-36", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-36" }, { "reference_url": "https://security.archlinux.org/ASA-201701-37", "reference_id": "ASA-201701-37", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201701-37" }, { "reference_url": "https://security.archlinux.org/AVG-154", "reference_id": "AVG-154", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-154" }, { "reference_url": "https://security.archlinux.org/AVG-155", "reference_id": "AVG-155", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-155" }, { "reference_url": "https://security.gentoo.org/glsa/201702-07", "reference_id": "GLSA-201702-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-07" }, { "reference_url": "https://security.gentoo.org/glsa/201802-04", "reference_id": "GLSA-201802-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201802-04" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2185", "reference_id": "RHSA-2018:2185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2186", "reference_id": "RHSA-2018:2186", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2186" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2187", "reference_id": "RHSA-2018:2187", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2568", "reference_id": "RHSA-2018:2568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2568" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2575", "reference_id": "RHSA-2018:2575", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2575" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2713", "reference_id": "RHSA-2018:2713", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2713" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3732" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-smvv-rrba-qqa5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97163?format=api", "vulnerability_id": "VCID-sq4p-ecxr-2qc8", "summary": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2109.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.57944", "scoring_system": "epss", "scoring_elements": "0.98213", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.57944", "scoring_system": "epss", "scoring_elements": "0.98216", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.57944", "scoring_system": "epss", "scoring_elements": "0.98217", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2109" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1330101", "reference_id": "1330101", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1330101" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2959-1/", "reference_id": "USN-2959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2109" ], "risk_score": 1.8, "exploitability": "0.5", "weighted_severity": "3.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sq4p-ecxr-2qc8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44405?format=api", "vulnerability_id": "VCID-taas-512g-jfdw", "summary": "Use After Free\nThe public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0215.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0215.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.62897", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.62856", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.62898", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0043", "scoring_system": "epss", "scoring_elements": "0.62908", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2023-0009.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2023-0009.html" }, { "reference_url": "https://security.gentoo.org/glsa/202402-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://security.gentoo.org/glsa/202402-08" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230427-0007", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20230427-0007" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230427-0009", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20230427-0009" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://www.openssl.org/news/secadv/20230207.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://www.openssl.org/news/secadv/20230207.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164492", "reference_id": "2164492", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164492" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0215", "reference_id": "CVE-2023-0215", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0215" }, { "reference_url": "https://github.com/advisories/GHSA-r7jw-wp68-3xch", "reference_id": "GHSA-r7jw-wp68-3xch", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-r7jw-wp68-3xch" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230427-0007/", "reference_id": "ntap-20230427-0007", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230427-0007/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20230427-0009/", "reference_id": "ntap-20230427-0009", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20230427-0009/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:40Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0946", "reference_id": "RHSA-2023:0946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1199", "reference_id": "RHSA-2023:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1405", "reference_id": "RHSA-2023:1405", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1405" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2165", "reference_id": "RHSA-2023:2165", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2165" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2932", "reference_id": "RHSA-2023:2932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3354", "reference_id": "RHSA-2023:3354", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3354" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3355", "reference_id": "RHSA-2023:3355", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3355" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3408", "reference_id": "RHSA-2023:3408", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3408" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3420", "reference_id": "RHSA-2023:3420", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3420" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3421", "reference_id": "RHSA-2023:3421", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3421" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4128", "reference_id": "RHSA-2023:4128", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4128" }, { "reference_url": "https://usn.ubuntu.com/5844-1/", "reference_id": "USN-5844-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5844-1/" }, { "reference_url": "https://usn.ubuntu.com/5845-1/", "reference_id": "USN-5845-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5845-1/" }, { "reference_url": "https://usn.ubuntu.com/5845-2/", "reference_id": "USN-5845-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5845-2/" }, { "reference_url": "https://usn.ubuntu.com/6564-1/", "reference_id": "USN-6564-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6564-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-0215", "GHSA-r7jw-wp68-3xch" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-taas-512g-jfdw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97087?format=api", "vulnerability_id": "VCID-tdn2-q5yk-zuh1", "summary": "The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.9554", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95548", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95551", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95553", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1047840", "reference_id": "1047840", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1047840" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-6450" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tdn2-q5yk-zuh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54076?format=api", "vulnerability_id": "VCID-tkap-7nn3-uqae", "summary": "Integer Overflow or Wraparound\nThe OpenSSL public API function `X509_issuer_and_serial_hash()` attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23841.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23841.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23841", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00958", "scoring_system": "epss", "scoring_elements": "0.76837", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00958", "scoring_system": "epss", "scoring_elements": "0.76834", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00958", "scoring_system": "epss", "scoring_elements": "0.76804", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00958", "scoring_system": "epss", "scoring_elements": "0.76844", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23841" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1551" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23840" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23841" }, { "reference_url": "http://seclists.org/fulldisclosure/2021/May/67", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "http://seclists.org/fulldisclosure/2021/May/67" }, { "reference_url": "http://seclists.org/fulldisclosure/2021/May/68", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "http://seclists.org/fulldisclosure/2021/May/68" }, { "reference_url": "http://seclists.org/fulldisclosure/2021/May/70", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "http://seclists.org/fulldisclosure/2021/May/70" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/alexcrichton/openssl-src-rs", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/alexcrichton/openssl-src-rs" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=122a19ab48091c657f7cb1fb3af9fc07bd557bbf" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2" }, { "reference_url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0058", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0058" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0058.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0058.html" }, { "reference_url": "https://security.gentoo.org/glsa/202103-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://security.gentoo.org/glsa/202103-03" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210219-0009", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210219-0009" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210513-0002", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210513-0002" }, { "reference_url": "https://support.apple.com/kb/HT212528", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://support.apple.com/kb/HT212528" }, { "reference_url": "https://support.apple.com/kb/HT212529", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://support.apple.com/kb/HT212529" }, { "reference_url": "https://support.apple.com/kb/HT212534", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://support.apple.com/kb/HT212534" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4855", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.debian.org/security/2021/dsa-4855" }, { "reference_url": "https://www.openssl.org/news/secadv/20210216.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.openssl.org/news/secadv/20210216.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com//security-alerts/cpujul2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-03", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.tenable.com/security/tns-2021-03" }, { "reference_url": "https://www.tenable.com/security/tns-2021-09", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://www.tenable.com/security/tns-2021-09" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930310", "reference_id": "1930310", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930310" }, { "reference_url": "https://security.archlinux.org/ASA-202102-42", "reference_id": "ASA-202102-42", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202102-42" }, { "reference_url": "https://security.archlinux.org/AVG-1581", "reference_id": "AVG-1581", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1581" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23841", "reference_id": "CVE-2021-23841", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23841" }, { "reference_url": "https://github.com/advisories/GHSA-84rm-qf37-fgc2", "reference_id": "GHSA-84rm-qf37-fgc2", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-84rm-qf37-fgc2" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210219-0009/", "reference_id": "ntap-20210219-0009", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210219-0009/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210513-0002/", "reference_id": "ntap-20210513-0002", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-26T20:18:08Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3798", "reference_id": "RHSA-2021:3798", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3798" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4198", "reference_id": "RHSA-2021:4198", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4198" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4424", "reference_id": "RHSA-2021:4424", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4424" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4613", "reference_id": "RHSA-2021:4613", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4613" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4614", "reference_id": "RHSA-2021:4614", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4614" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4861", "reference_id": "RHSA-2021:4861", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4861" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4863", "reference_id": "RHSA-2021:4863", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4863" }, { "reference_url": "https://usn.ubuntu.com/4738-1/", "reference_id": "USN-4738-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4738-1/" }, { "reference_url": "https://usn.ubuntu.com/4745-1/", "reference_id": "USN-4745-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4745-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-23841", "GHSA-84rm-qf37-fgc2" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tkap-7nn3-uqae" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44399?format=api", "vulnerability_id": "VCID-ts7c-u8g2-rqa4", "summary": "Access of Resource Using Incompatible Type ('Type Confusion')\nThere is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0286.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-0286.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.88334", "scoring_system": "epss", "scoring_elements": "0.99515", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.88334", "scoring_system": "epss", "scoring_elements": "0.99513", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.88334", "scoring_system": "epss", "scoring_elements": "0.99514", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4304" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0215" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0286" }, { "reference_url": "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt" }, { "reference_url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/pyca/cryptography", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d" }, { "reference_url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2023-0006.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2023-0006.html" }, { "reference_url": "https://security.gentoo.org/glsa/202402-08", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://security.gentoo.org/glsa/202402-08" }, { "reference_url": "https://www.openssl.org/news/secadv/20230207.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-06T15:57:22Z/" } ], "url": "https://www.openssl.org/news/secadv/20230207.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164440", "reference_id": "2164440", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2164440" }, { "reference_url": "https://access.redhat.com/security/cve/cve-2023-0286", "reference_id": "CVE-2023-0286", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/security/cve/cve-2023-0286" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0286", "reference_id": "CVE-2023-0286", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0286" }, { "reference_url": "https://github.com/advisories/GHSA-x4qr-2fvf-3mr5", "reference_id": "GHSA-x4qr-2fvf-3mr5", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-x4qr-2fvf-3mr5" }, { "reference_url": "https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5", "reference_id": "GHSA-x4qr-2fvf-3mr5", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-x4qr-2fvf-3mr5" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:0946", "reference_id": "RHSA-2023:0946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:0946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1199", "reference_id": "RHSA-2023:1199", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1199" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1335", "reference_id": "RHSA-2023:1335", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1335" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1405", "reference_id": "RHSA-2023:1405", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1405" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1437", "reference_id": "RHSA-2023:1437", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1438", "reference_id": "RHSA-2023:1438", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1438" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1439", "reference_id": "RHSA-2023:1439", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1439" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1440", "reference_id": "RHSA-2023:1440", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1440" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:1441", "reference_id": "RHSA-2023:1441", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:1441" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2022", "reference_id": "RHSA-2023:2022", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2022" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2165", "reference_id": "RHSA-2023:2165", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2165" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:2932", "reference_id": "RHSA-2023:2932", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:2932" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3354", "reference_id": "RHSA-2023:3354", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3354" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3355", "reference_id": "RHSA-2023:3355", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3355" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3420", "reference_id": "RHSA-2023:3420", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3420" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:3421", "reference_id": "RHSA-2023:3421", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:3421" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4124", "reference_id": "RHSA-2023:4124", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4124" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4128", "reference_id": "RHSA-2023:4128", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4128" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4252", "reference_id": "RHSA-2023:4252", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4252" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5209", "reference_id": "RHSA-2023:5209", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5209" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:5136", "reference_id": "RHSA-2024:5136", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:5136" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:6095", "reference_id": "RHSA-2024:6095", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:6095" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7733", "reference_id": "RHSA-2025:7733", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7733" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7895", "reference_id": "RHSA-2025:7895", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7895" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7937", "reference_id": "RHSA-2025:7937", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7937" }, { "reference_url": "https://usn.ubuntu.com/5844-1/", "reference_id": "USN-5844-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5844-1/" }, { "reference_url": "https://usn.ubuntu.com/5845-1/", "reference_id": "USN-5845-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5845-1/" }, { "reference_url": "https://usn.ubuntu.com/5845-2/", "reference_id": "USN-5845-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5845-2/" }, { "reference_url": "https://usn.ubuntu.com/6564-1/", "reference_id": "USN-6564-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6564-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-0286", "GHSA-x4qr-2fvf-3mr5" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ts7c-u8g2-rqa4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97106?format=api", "vulnerability_id": "VCID-tuv3-bf9n-5kfg", "summary": "Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96428", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96432", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96436", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96437", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152961", "reference_id": "1152961", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152961" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1652", "reference_id": "RHSA-2014:1652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1692", "reference_id": "RHSA-2014:1692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0126", "reference_id": "RHSA-2015:0126", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0126" }, { "reference_url": "https://usn.ubuntu.com/2385-1/", "reference_id": "USN-2385-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2385-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3567" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tuv3-bf9n-5kfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97127?format=api", "vulnerability_id": "VCID-tw5c-d87m-syfy", "summary": "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95762", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95767", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95771", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95772", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202366", "reference_id": "1202366", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202366" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0286" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tw5c-d87m-syfy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97185?format=api", "vulnerability_id": "VCID-u1mq-dx66-9yer", "summary": "Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-0733.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0733", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02235", "scoring_system": "epss", "scoring_elements": "0.8485", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02235", "scoring_system": "epss", "scoring_elements": "0.84873", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02235", "scoring_system": "epss", "scoring_elements": "0.84877", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02235", "scoring_system": "epss", "scoring_elements": "0.84872", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0733" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561260", "reference_id": "1561260", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1561260" }, { "reference_url": "https://security.gentoo.org/glsa/201811-21", "reference_id": "GLSA-201811-21", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201811-21" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2018-0733" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u1mq-dx66-9yer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97108?format=api", "vulnerability_id": "VCID-um7w-rbrc-vfaz", "summary": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91974", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91986", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91988", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91985", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:M/C:N/I:N/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177249", "reference_id": "1177249", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177249" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3569" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-um7w-rbrc-vfaz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97117?format=api", "vulnerability_id": "VCID-uryx-vzmr-83g4", "summary": "The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93983", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93991", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93992", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180239", "reference_id": "1180239", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0205" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uryx-vzmr-83g4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97099?format=api", "vulnerability_id": "VCID-ustf-8ujc-y3dd", "summary": "The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87089", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87112", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87109", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87104", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127490", "reference_id": "1127490", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127490" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3508" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ustf-8ujc-y3dd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/5285?format=api", "vulnerability_id": "VCID-uw52-vah8-uqda", "summary": "multiple issues", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-3712.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3712", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0046", "scoring_system": "epss", "scoring_elements": "0.64439", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0046", "scoring_system": "epss", "scoring_elements": "0.64479", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0046", "scoring_system": "epss", "scoring_elements": "0.64491", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0046", "scoring_system": "epss", "scoring_elements": "0.64483", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-3712" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-019200.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-028723.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-028723.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-244969.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-244969.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/html/ssa-389290.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://cert-portal.siemens.com/productcert/html/ssa-389290.html" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3711" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3712" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=94d23fcff9b2a7a8368dfe52214d5c2569882c11" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ccb0a11145ee72b042d10593a64eaf9e8a55ec12" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10366", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10366" }, { "reference_url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2021-0098.html" }, { "reference_url": "https://security.gentoo.org/glsa/202209-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://security.gentoo.org/glsa/202209-02" }, { "reference_url": "https://security.gentoo.org/glsa/202210-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://security.gentoo.org/glsa/202210-02" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210827-0010", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20210827-0010" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210827-0010/", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210827-0010/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://www.debian.org/security/2021/dsa-4963", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.debian.org/security/2021/dsa-4963" }, { "reference_url": "https://www.openssl.org/news/secadv/20210824.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.openssl.org/news/secadv/20210824.txt" }, { "reference_url": "https://www.openwall.com/lists/oss-security/2021/08/26/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.openwall.com/lists/oss-security/2021/08/26/2" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.tenable.com/security/tns-2021-16", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.tenable.com/security/tns-2021-16" }, { "reference_url": "https://www.tenable.com/security/tns-2022-02", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://www.tenable.com/security/tns-2022-02" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2021/08/26/2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2021/08/26/2" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995634", "reference_id": "1995634", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995634" }, { "reference_url": "https://security.archlinux.org/AVG-2315", "reference_id": "AVG-2315", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2315" }, { "reference_url": "https://security.archlinux.org/AVG-2316", "reference_id": "AVG-2316", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2316" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712", "reference_id": "CVE-2021-3712", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3712" }, { "reference_url": "https://github.com/advisories/GHSA-q9wj-f4qw-6vfj", "reference_id": "GHSA-q9wj-f4qw-6vfj", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q9wj-f4qw-6vfj" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "7.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-16T14:11:09Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4613", "reference_id": "RHSA-2021:4613", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4613" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4614", "reference_id": "RHSA-2021:4614", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4614" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4861", "reference_id": "RHSA-2021:4861", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4861" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:4863", "reference_id": "RHSA-2021:4863", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:4863" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5226", "reference_id": "RHSA-2021:5226", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5226" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:0064", "reference_id": "RHSA-2022:0064", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:0064" }, { "reference_url": "https://usn.ubuntu.com/5051-1/", "reference_id": "USN-5051-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5051-1/" }, { "reference_url": "https://usn.ubuntu.com/5051-2/", "reference_id": "USN-5051-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5051-2/" }, { "reference_url": "https://usn.ubuntu.com/5051-3/", "reference_id": "USN-5051-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5051-3/" }, { "reference_url": "https://usn.ubuntu.com/5088-1/", "reference_id": "USN-5088-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/5088-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5335?format=api", "purl": "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb10u3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1n-0%252Bdeb10u3" } ], "aliases": [ "CVE-2021-3712", "GHSA-q9wj-f4qw-6vfj" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uw52-vah8-uqda" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68068?format=api", "vulnerability_id": "VCID-v4en-se25-u7fu", "summary": "openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69418.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69418.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69418", "reference_id": "", "reference_type": "", "scores": [ { "value": "9e-05", "scoring_system": "epss", "scoring_elements": "0.01089", "published_at": "2026-06-07T12:55:00Z" }, { "value": "9e-05", "scoring_system": "epss", "scoring_elements": "0.0109", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69418" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69418" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381", "reference_id": "2430381", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430381" }, { "reference_url": "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc", "reference_id": "372fc5c77529695b05b4f5b5187691a57ef5dffc", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://github.com/openssl/openssl/commit/372fc5c77529695b05b4f5b5187691a57ef5dffc" }, { "reference_url": "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8", "reference_id": "4016975d4469cd6b94927c607f7c511385f928d8", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://github.com/openssl/openssl/commit/4016975d4469cd6b94927c607f7c511385f928d8" }, { "reference_url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347", "reference_id": "52d23c86a54adab5ee9f80e48b242b52c4cc2347", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://github.com/openssl/openssl/commit/52d23c86a54adab5ee9f80e48b242b52c4cc2347" }, { "reference_url": "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae", "reference_id": "a7589230356d908c0eca4b969ec4f62106f4f5ae", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://github.com/openssl/openssl/commit/a7589230356d908c0eca4b969ec4f62106f4f5ae" }, { "reference_url": "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977", "reference_id": "ed40856d7d4ba6cb42779b6770666a65f19cb977", "reference_type": "", "scores": [ { "value": "4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-29T15:06:43Z/" } ], "url": "https://github.com/openssl/openssl/commit/ed40856d7d4ba6cb42779b6770666a65f19cb977" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-69418" ], "risk_score": 1.8, "exploitability": "0.5", "weighted_severity": "3.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v4en-se25-u7fu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68071?format=api", "vulnerability_id": "VCID-v6un-s51d-z3hq", "summary": "openssl: OpenSSL: Denial of Service via malformed TimeStamp Response", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69420.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69420.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69420", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01131", "scoring_system": "epss", "scoring_elements": "0.78693", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.01131", "scoring_system": "epss", "scoring_elements": "0.78694", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01131", "scoring_system": "epss", "scoring_elements": "0.78702", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-69420" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69420" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388", "reference_id": "2430388", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430388" }, { "reference_url": "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9", "reference_id": "27c7012c91cc986a598d7540f3079dfde2416eb9", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://github.com/openssl/openssl/commit/27c7012c91cc986a598d7540f3079dfde2416eb9" }, { "reference_url": "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a", "reference_id": "4e254b48ad93cc092be3dd62d97015f33f73133a", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://github.com/openssl/openssl/commit/4e254b48ad93cc092be3dd62d97015f33f73133a" }, { "reference_url": "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e", "reference_id": "564fd9c73787f25693bf9e75faf7bf6bb1305d4e", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://github.com/openssl/openssl/commit/564fd9c73787f25693bf9e75faf7bf6bb1305d4e" }, { "reference_url": "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b", "reference_id": "5eb0770ffcf11b785cf374ff3c19196245e54f1b", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://github.com/openssl/openssl/commit/5eb0770ffcf11b785cf374ff3c19196245e54f1b" }, { "reference_url": "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085", "reference_id": "a99349ebfc519999edc50620abe24d599b9eb085", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-28T19:33:06Z/" } ], "url": "https://github.com/openssl/openssl/commit/a99349ebfc519999edc50620abe24d599b9eb085" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2025-69420" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v6un-s51d-z3hq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97059?format=api", "vulnerability_id": "VCID-vg5j-kxp6-3qd4", "summary": "Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95459", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95466", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95469", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95471", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087195", "reference_id": "1087195", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087195" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2192-1/", "reference_id": "USN-2192-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2192-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2010-5298" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vg5j-kxp6-3qd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97179?format=api", "vulnerability_id": "VCID-vkad-cc3g-akc7", "summary": "During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0 before 1.1.0e to crash (dependent on ciphersuite). Both clients and servers are affected.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-3733.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3733", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03097", "scoring_system": "epss", "scoring_elements": "0.87041", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03097", "scoring_system": "epss", "scoring_elements": "0.87063", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03097", "scoring_system": "epss", "scoring_elements": "0.87061", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03097", "scoring_system": "epss", "scoring_elements": "0.87055", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-3733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3733" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421695", "reference_id": "1421695", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1421695" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/5334?format=api", "purl": "pkg:deb/debian/openssl@1.1.0l-1~deb9u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.0l-1~deb9u1" } ], "aliases": [ "CVE-2017-3733" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vkad-cc3g-akc7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45761?format=api", "vulnerability_id": "VCID-w1qj-n768-hbar", "summary": "Excessive Iteration\nIssue summary: Checking excessively long DH keys or parameters may be very slow.\n\nImpact summary: Applications that use the functions DH_check(), DH_check_ex()\nor EVP_PKEY_param_check() to check a DH key or DH parameters may experience long\ndelays. Where the key or parameters that are being checked have been obtained\nfrom an untrusted source this may lead to a Denial of Service.\n\nThe function DH_check() performs various checks on DH parameters. After fixing\nCVE-2023-3446 it was discovered that a large q parameter value can also trigger\nan overly long computation during some of these checks. A correct q value,\nif present, cannot be larger than the modulus p parameter, thus it is\nunnecessary to perform these checks if q is larger than p.\n\nAn application that calls DH_check() and supplies a key or parameters obtained\nfrom an untrusted source could be vulnerable to a Denial of Service attack.\n\nThe function DH_check() is itself called by a number of other OpenSSL functions.\nAn application calling any of those other functions may similarly be affected.\nThe other functions affected by this are DH_check_ex() and\nEVP_PKEY_param_check().\n\nAlso vulnerable are the OpenSSL dhparam and pkeyparam command line applications\nwhen using the \"-check\" option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3817.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3817.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-3817", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00351", "scoring_system": "epss", "scoring_elements": "0.57816", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00351", "scoring_system": "epss", "scoring_elements": "0.57818", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00351", "scoring_system": "epss", "scoring_elements": "0.57826", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-3817" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3817" }, { "reference_url": "http://seclists.org/fulldisclosure/2023/Jul/43", "reference_id": "", "reference_type": "", "scores": [], "url": "http://seclists.org/fulldisclosure/2023/Jul/43" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:20Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a1eb62c29db6cb5eec707f9338aee00f44e26f5" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:20Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=869ad69aadd985c7b8ca6f4e5dd0eb274c9f3644" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:20Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9002fd07327a91f35ba6c1307e71fa6fd4409b7f" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:20Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=91ddeba0f2269b017dc06c46c993a788974b1aa5" }, { "reference_url": "https://www.openssl.org/news/secadv/20230731.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-23T13:26:20Z/" } ], "url": "https://www.openssl.org/news/secadv/20230731.txt" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2023/07/31/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.openwall.com/lists/oss-security/2023/07/31/1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2227852", "reference_id": "2227852", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2227852" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817", "reference_id": "CVE-2023-3817", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3817" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5931", "reference_id": "RHSA-2023:5931", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5931" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7622", "reference_id": "RHSA-2023:7622", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7622" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7623", "reference_id": "RHSA-2023:7623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7625", "reference_id": "RHSA-2023:7625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7626", "reference_id": "RHSA-2023:7626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7626" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:7877", "reference_id": "RHSA-2023:7877", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:7877" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0154", "reference_id": "RHSA-2024:0154", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0154" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:0208", "reference_id": "RHSA-2024:0208", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:0208" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:2447", "reference_id": "RHSA-2024:2447", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:2447" }, { "reference_url": "https://usn.ubuntu.com/6435-1/", "reference_id": "USN-6435-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6435-1/" }, { "reference_url": "https://usn.ubuntu.com/6435-2/", "reference_id": "USN-6435-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6435-2/" }, { "reference_url": "https://usn.ubuntu.com/6450-1/", "reference_id": "USN-6450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6450-1/" }, { "reference_url": "https://usn.ubuntu.com/6709-1/", "reference_id": "USN-6709-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6709-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195859?format=api", "purl": "pkg:deb/debian/openssl@1.1.1w-0%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2hzz-tqgz-tbew" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-ey1a-gmtq-6yct" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rgbt-w2ev-cfgw" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-utdy-jcq5-w7g6" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xdsu-j1e8-ducr" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.1.1w-0%252Bdeb11u1" } ], "aliases": [ "CVE-2023-3817" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w1qj-n768-hbar" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97129?format=api", "vulnerability_id": "VCID-w7uh-sfv6-1ua1", "summary": "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88557", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88575", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88577", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88576", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202418", "reference_id": "1202418", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202418" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0288" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w7uh-sfv6-1ua1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97159?format=api", "vulnerability_id": "VCID-wmmk-t96u-e3cu", "summary": "Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2105.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.45502", "scoring_system": "epss", "scoring_elements": "0.97679", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.45502", "scoring_system": "epss", "scoring_elements": "0.97683", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.45502", "scoring_system": "epss", "scoring_elements": "0.97684", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:N/C:N/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331441", "reference_id": "1331441", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331441" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1648", "reference_id": "RHSA-2016:1648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1649", "reference_id": "RHSA-2016:1649", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1649" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2959-1/", "reference_id": "USN-2959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2105" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wmmk-t96u-e3cu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/89952?format=api", "vulnerability_id": "VCID-x5bw-wd4j-13e4", "summary": "openssl: SSL_select_next_proto buffer overread", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5535.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-5535.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-5535", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.06873", "scoring_system": "epss", "scoring_elements": "0.91543", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.06873", "scoring_system": "epss", "scoring_elements": "0.91545", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.06873", "scoring_system": "epss", "scoring_elements": "0.91546", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-5535" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5535" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074487", "reference_id": "1074487", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074487" }, { "reference_url": "https://www.openssl.org/news/secadv/20240627.txt", "reference_id": "20240627.txt", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://www.openssl.org/news/secadv/20240627.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294581", "reference_id": "2294581", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2294581" }, { "reference_url": "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37", "reference_id": "4ada436a1946cbb24db5ab4ca082b69c1bc10f37", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.com/openssl/openssl/commit/4ada436a1946cbb24db5ab4ca082b69c1bc10f37" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c", "reference_id": "9947251413065a05189a63c9b7a6c1d4e224c21c", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/9947251413065a05189a63c9b7a6c1d4e224c21c" }, { "reference_url": "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e", "reference_id": "99fb785a5f85315b95288921a321a935ea29a51e", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.com/openssl/openssl/commit/99fb785a5f85315b95288921a321a935ea29a51e" }, { "reference_url": "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87", "reference_id": "b78ec0824da857223486660177d3b1f255c65d87", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.openssl.org/openssl/extended-releases/commit/b78ec0824da857223486660177d3b1f255c65d87" }, { "reference_url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c", "reference_id": "cf6f91f6121f4db167405db2f0de410a456f260c", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.com/openssl/openssl/commit/cf6f91f6121f4db167405db2f0de410a456f260c" }, { "reference_url": "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c", "reference_id": "e86ac436f0bd54d4517745483e2315650fae7b2c", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-27T13:50:16Z/" } ], "url": "https://github.com/openssl/openssl/commit/e86ac436f0bd54d4517745483e2315650fae7b2c" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:7846", "reference_id": "RHSA-2024:7846", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:7846" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:7847", "reference_id": "RHSA-2024:7847", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:7847" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:7848", "reference_id": "RHSA-2024:7848", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:7848" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:9333", "reference_id": "RHSA-2024:9333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:9333" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1671", "reference_id": "RHSA-2025:1671", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1671" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1673", "reference_id": "RHSA-2025:1673", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:1673" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3452", "reference_id": "RHSA-2025:3452", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3452" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3453", "reference_id": "RHSA-2025:3453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3453" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:3666", "reference_id": "RHSA-2025:3666", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:3666" }, { "reference_url": "https://usn.ubuntu.com/6937-1/", "reference_id": "USN-6937-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6937-1/" }, { "reference_url": "https://usn.ubuntu.com/7894-1/", "reference_id": "USN-7894-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7894-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2024-5535" ], "risk_score": 4.1, "exploitability": "0.5", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x5bw-wd4j-13e4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97085?format=api", "vulnerability_id": "VCID-x6t8-ay52-ykfr", "summary": "The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4353", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95946", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95951", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95954", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4353" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049058", "reference_id": "1049058", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049058" }, { "reference_url": "https://security.gentoo.org/glsa/201402-25", "reference_id": "GLSA-201402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201402-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0041", "reference_id": "RHSA-2014:0041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0041" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-4353" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x6t8-ay52-ykfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97152?format=api", "vulnerability_id": "VCID-xhgb-kse1-r3ea", "summary": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68133", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68173", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68182", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68174", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310599", "reference_id": "1310599", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310599" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0702" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xhgb-kse1-r3ea" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97091?format=api", "vulnerability_id": "VCID-xmgs-gryg-6fh2", "summary": "The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0198", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96985", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96989", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96992", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96993", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0198" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093837", "reference_id": "1093837", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093837" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747432", "reference_id": "747432", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747432" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2192-1/", "reference_id": "USN-2192-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2192-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0198" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xmgs-gryg-6fh2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97173?format=api", "vulnerability_id": "VCID-xpn8-u26e-77ge", "summary": "A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7056.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7056", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00176", "scoring_system": "epss", "scoring_elements": "0.38884", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00176", "scoring_system": "epss", "scoring_elements": "0.38821", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00176", "scoring_system": "epss", "scoring_elements": "0.38909", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00176", "scoring_system": "epss", "scoring_elements": "0.38912", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7056" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7056" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8610" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3731" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:N/C:C/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1412120", "reference_id": "1412120", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1412120" }, { "reference_url": "https://security.archlinux.org/AVG-140", "reference_id": "AVG-140", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-140" }, { "reference_url": "https://security.archlinux.org/AVG-141", "reference_id": "AVG-141", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-141" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1413", "reference_id": "RHSA-2017:1413", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1413" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1414", "reference_id": "RHSA-2017:1414", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1414" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1415", "reference_id": "RHSA-2017:1415", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1415" }, { "reference_url": "https://usn.ubuntu.com/3181-1/", "reference_id": "USN-3181-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3181-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-7056" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xpn8-u26e-77ge" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97101?format=api", "vulnerability_id": "VCID-xzyr-6dak-hqes", "summary": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94629", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94638", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94639", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127503", "reference_id": "1127503", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127503" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3510" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xzyr-6dak-hqes" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68073?format=api", "vulnerability_id": "VCID-zhax-1919-2ygm", "summary": "openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22796.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22796.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-22796", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0052", "scoring_system": "epss", "scoring_elements": "0.67209", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0052", "scoring_system": "epss", "scoring_elements": "0.67218", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0052", "scoring_system": "epss", "scoring_elements": "0.67225", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-22796" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22796" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://openssl-library.org/news/secadv/20260127.txt", "reference_id": "20260127.txt", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://openssl-library.org/news/secadv/20260127.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390", "reference_id": "2430390", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430390" }, { "reference_url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4", "reference_id": "2502e7b7d4c0cf4f972a881641fe09edc67aeec4", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://github.com/openssl/openssl/commit/2502e7b7d4c0cf4f972a881641fe09edc67aeec4" }, { "reference_url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49", "reference_id": "572844beca95068394c916626a6d3a490f831a49", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://github.com/openssl/openssl/commit/572844beca95068394c916626a6d3a490f831a49" }, { "reference_url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12", "reference_id": "7bbca05be55b129651d9df4bdb92becc45002c12", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://github.com/openssl/openssl/commit/7bbca05be55b129651d9df4bdb92becc45002c12" }, { "reference_url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e", "reference_id": "eeee3cbd4d682095ed431052f00403004596373e", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://github.com/openssl/openssl/commit/eeee3cbd4d682095ed431052f00403004596373e" }, { "reference_url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2", "reference_id": "ef2fb66ec571564d64d1c74a12e388a2a54d05d2", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-27T16:27:50Z/" } ], "url": "https://github.com/openssl/openssl/commit/ef2fb66ec571564d64d1c74a12e388a2a54d05d2" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1472", "reference_id": "RHSA-2026:1472", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1472" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1473", "reference_id": "RHSA-2026:1473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:1736", "reference_id": "RHSA-2026:1736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:1736" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2485", "reference_id": "RHSA-2026:2485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:2563", "reference_id": "RHSA-2026:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:2563" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:3228", "reference_id": "RHSA-2026:3228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:3228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:4943", "reference_id": "RHSA-2026:4943", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:4943" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7261", "reference_id": "RHSA-2026:7261", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7261" }, { "reference_url": "https://usn.ubuntu.com/7980-1/", "reference_id": "USN-7980-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-1/" }, { "reference_url": "https://usn.ubuntu.com/7980-2/", "reference_id": "USN-7980-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7980-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/195860?format=api", "purl": "pkg:deb/debian/openssl@3.0.14-1~deb12u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@3.0.14-1~deb12u1" } ], "aliases": [ "CVE-2026-22796" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zhax-1919-2ygm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97162?format=api", "vulnerability_id": "VCID-zmk4-zgkk-7kdh", "summary": "The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2108.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.36957", "scoring_system": "epss", "scoring_elements": "0.97243", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.36957", "scoring_system": "epss", "scoring_elements": "0.97247", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.36957", "scoring_system": "epss", "scoring_elements": "0.97248", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.36957", "scoring_system": "epss", "scoring_elements": "0.97249", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2106" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2109" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:C/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402", "reference_id": "1331402", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1331402" }, { "reference_url": "https://security.gentoo.org/glsa/201612-16", "reference_id": "GLSA-201612-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-16" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1137", "reference_id": "RHSA-2016:1137", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1137" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0193", "reference_id": "RHSA-2017:0193", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0193" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:0194", "reference_id": "RHSA-2017:0194", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:0194" }, { "reference_url": "https://usn.ubuntu.com/2959-1/", "reference_id": "USN-2959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2108" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zmk4-zgkk-7kdh" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97111?format=api", "vulnerability_id": "VCID-1vv2-224u-8ff5", "summary": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3572.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92688", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.927", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92696", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08845", "scoring_system": "epss", "scoring_elements": "0.92692", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180185", "reference_id": "1180185", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180185" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3572" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1vv2-224u-8ff5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97100?format=api", "vulnerability_id": "VCID-2gwr-hz4v-3ua5", "summary": "Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3509.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94205", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94213", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.12974", "scoring_system": "epss", "scoring_elements": "0.94212", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127498", "reference_id": "1127498", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127498" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0197", "reference_id": "RHSA-2015:0197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0197" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3509" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2gwr-hz4v-3ua5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97158?format=api", "vulnerability_id": "VCID-41jv-azph-dyat", "summary": "The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0799.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97583", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97588", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.9759", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.43537", "scoring_system": "epss", "scoring_elements": "0.97589", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1312219", "reference_id": "1312219", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1312219" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0799" ], "risk_score": 0.7, "exploitability": "0.5", "weighted_severity": "1.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-41jv-azph-dyat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97083?format=api", "vulnerability_id": "VCID-4967-pwbc-kub4", "summary": "crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2686.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2686", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.63145", "scoring_system": "epss", "scoring_elements": "0.98419", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.63145", "scoring_system": "epss", "scoring_elements": "0.98422", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.63145", "scoring_system": "epss", "scoring_elements": "0.98424", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.63145", "scoring_system": "epss", "scoring_elements": "0.98423", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2686" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2686", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2686" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889", "reference_id": "699889", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=908029", "reference_id": "908029", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908029" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://usn.ubuntu.com/1732-1/", "reference_id": "USN-1732-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1732-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-2686" ], "risk_score": 1.2, "exploitability": "2.0", "weighted_severity": "0.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4967-pwbc-kub4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97065?format=api", "vulnerability_id": "VCID-4d1p-jad4-gbeb", "summary": "The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4108.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4108", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01251", "scoring_system": "epss", "scoring_elements": "0.79668", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01251", "scoring_system": "epss", "scoring_elements": "0.79694", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01251", "scoring_system": "epss", "scoring_elements": "0.797", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01251", "scoring_system": "epss", "scoring_elements": "0.79695", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4108" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4108" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645805", "reference_id": "645805", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=645805" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771770", "reference_id": "771770", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771770" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0059", "reference_id": "RHSA-2012:0059", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0059" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0060", "reference_id": "RHSA-2012:0060", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0060" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-4108" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4d1p-jad4-gbeb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97071?format=api", "vulnerability_id": "VCID-51qn-4f7n-1kdv", "summary": "The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4619.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4619", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03163", "scoring_system": "epss", "scoring_elements": "0.87161", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03163", "scoring_system": "epss", "scoring_elements": "0.87183", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03163", "scoring_system": "epss", "scoring_elements": "0.87181", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03163", "scoring_system": "epss", "scoring_elements": "0.87178", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4619" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771780", "reference_id": "771780", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771780" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0059", "reference_id": "RHSA-2012:0059", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0059" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0060", "reference_id": "RHSA-2012:0060", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0060" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0086", "reference_id": "RHSA-2012:0086", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0086" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0109", "reference_id": "RHSA-2012:0109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-4619" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-51qn-4f7n-1kdv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97166?format=api", "vulnerability_id": "VCID-6ckn-3rv4-abhh", "summary": "The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows remote attackers to cause a denial of service (out-of-bounds write or memory consumption) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-0799.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2842.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98066", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98068", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.54295", "scoring_system": "epss", "scoring_elements": "0.98067", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-2842" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314757", "reference_id": "1314757", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1314757" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0722", "reference_id": "RHSA-2016:0722", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0722" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0996", "reference_id": "RHSA-2016:0996", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0996" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2073", "reference_id": "RHSA-2016:2073", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2073" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-2842" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6ckn-3rv4-abhh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/319646?format=api", "vulnerability_id": "VCID-6hzf-4dn7-1kd4", "summary": "regression update", "references": [], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "DSA-3197-2 openssl" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6hzf-4dn7-1kd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97112?format=api", "vulnerability_id": "VCID-77vh-npap-5fam", "summary": "The ssl_set_client_disabled function in t1_lib.c in OpenSSL 1.0.1 before 1.0.1i allows remote SSL servers to cause a denial of service (NULL pointer dereference and client application crash) via a ServerHello message that includes an SRP ciphersuite without the required negotiation of that ciphersuite with the client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5139.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97062", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97065", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97067", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.34029", "scoring_system": "epss", "scoring_elements": "0.97069", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-5139" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127491", "reference_id": "1127491", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127491" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-5139" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-77vh-npap-5fam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2931?format=api", "vulnerability_id": "VCID-7gkv-pu79-43hx", "summary": "Security researcher Matthew Green reported a Diffie–Hellman\n(DHE) key processing issue in Network Security Services (NSS) where a\nman-in-the-middle (MITM) attacker can force a server to downgrade TLS\nconnections to 512-bit export-grade cryptography by modifying client\nrequests to include only export-grade cipher suites. The resulting\nweak key can then be leveraged to impersonate the server. This attack\nis detailed in the \"Imperfect Forward\nSecrecy: How Diffie-Hellman Fails in Practice\" paper and is known as the\n\"Logjam Attack.\"This issue was fixed in NSS version 3.19.1 by limiting the lower strength of\nsupported DHE keys to use 1023 bit primes.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-4000.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4000", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.92346", "scoring_system": "epss", "scoring_elements": "0.99739", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.92346", "scoring_system": "epss", "scoring_elements": "0.9974", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-4000" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8873" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0460" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0469" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0470" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0477" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0478" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0480" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0488" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2590" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2601" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2613" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2621" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2625" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2628" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2632" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2808" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4731" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4732" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4733" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4748" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4749" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4760" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:C/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.securitytracker.com/id/1032474", "reference_id": "1032474", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032474" }, { "reference_url": "http://www.securitytracker.com/id/1032475", "reference_id": "1032475", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032475" }, { "reference_url": "http://www.securitytracker.com/id/1032476", "reference_id": "1032476", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032476" }, { "reference_url": "http://www.securitytracker.com/id/1032637", "reference_id": "1032637", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032637" }, { "reference_url": "http://www.securitytracker.com/id/1032645", "reference_id": "1032645", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032645" }, { "reference_url": "http://www.securitytracker.com/id/1032647", "reference_id": "1032647", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032647" }, { "reference_url": "http://www.securitytracker.com/id/1032648", "reference_id": "1032648", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032648" }, { "reference_url": "http://www.securitytracker.com/id/1032649", "reference_id": "1032649", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032649" }, { "reference_url": "http://www.securitytracker.com/id/1032650", "reference_id": "1032650", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032650" }, { "reference_url": "http://www.securitytracker.com/id/1032651", "reference_id": "1032651", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032651" }, { "reference_url": "http://www.securitytracker.com/id/1032652", "reference_id": "1032652", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032652" }, { "reference_url": "http://www.securitytracker.com/id/1032653", "reference_id": "1032653", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032653" }, { "reference_url": "http://www.securitytracker.com/id/1032654", "reference_id": "1032654", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032654" }, { "reference_url": "http://www.securitytracker.com/id/1032655", "reference_id": "1032655", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032655" }, { "reference_url": "http://www.securitytracker.com/id/1032656", "reference_id": "1032656", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032656" }, { "reference_url": "http://www.securitytracker.com/id/1032688", "reference_id": "1032688", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032688" }, { "reference_url": "http://www.securitytracker.com/id/1032699", "reference_id": "1032699", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032699" }, { "reference_url": "http://www.securitytracker.com/id/1032702", "reference_id": "1032702", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032702" }, { "reference_url": "http://www.securitytracker.com/id/1032727", "reference_id": "1032727", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032727" }, { "reference_url": "http://www.securitytracker.com/id/1032759", "reference_id": "1032759", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032759" }, { "reference_url": "http://www.securitytracker.com/id/1032777", "reference_id": "1032777", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032777" }, { "reference_url": "http://www.securitytracker.com/id/1032778", "reference_id": "1032778", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032778" }, { "reference_url": "http://www.securitytracker.com/id/1032783", "reference_id": "1032783", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032783" }, { "reference_url": "http://www.securitytracker.com/id/1032784", "reference_id": "1032784", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032784" }, { "reference_url": "http://www.securitytracker.com/id/1032856", "reference_id": "1032856", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032856" }, { "reference_url": "http://www.securitytracker.com/id/1032864", "reference_id": "1032864", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032864" }, { "reference_url": "http://www.securitytracker.com/id/1032865", "reference_id": "1032865", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032865" }, { "reference_url": "http://www.securitytracker.com/id/1032871", "reference_id": "1032871", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032871" }, { "reference_url": "http://www.securitytracker.com/id/1032884", "reference_id": "1032884", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032884" }, { "reference_url": "http://www.securitytracker.com/id/1032910", "reference_id": "1032910", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032910" }, { "reference_url": "http://www.securitytracker.com/id/1032932", "reference_id": "1032932", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032932" }, { "reference_url": "http://www.securitytracker.com/id/1032960", "reference_id": "1032960", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1032960" }, { "reference_url": "http://www.securitytracker.com/id/1033019", "reference_id": "1033019", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033019" }, { "reference_url": "http://www.securitytracker.com/id/1033064", "reference_id": "1033064", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033064" }, { "reference_url": "http://www.securitytracker.com/id/1033065", "reference_id": "1033065", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033065" }, { "reference_url": "http://www.securitytracker.com/id/1033067", "reference_id": "1033067", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033067" }, { "reference_url": "http://www.securitytracker.com/id/1033208", "reference_id": "1033208", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033208" }, { "reference_url": "http://www.securitytracker.com/id/1033209", "reference_id": "1033209", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033209" }, { "reference_url": "http://www.securitytracker.com/id/1033210", "reference_id": "1033210", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033210" }, { "reference_url": "http://www.securitytracker.com/id/1033222", "reference_id": "1033222", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033222" }, { "reference_url": "http://www.securitytracker.com/id/1033341", "reference_id": "1033341", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033341" }, { "reference_url": "http://www.securitytracker.com/id/1033385", "reference_id": "1033385", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033385" }, { "reference_url": "http://www.securitytracker.com/id/1033416", "reference_id": "1033416", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033416" }, { "reference_url": "http://www.securitytracker.com/id/1033430", "reference_id": "1033430", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033430" }, { "reference_url": "http://www.securitytracker.com/id/1033433", "reference_id": "1033433", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033433" }, { "reference_url": "http://www.securitytracker.com/id/1033513", "reference_id": "1033513", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033513" }, { "reference_url": "http://www.securitytracker.com/id/1033760", "reference_id": "1033760", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033760" }, { "reference_url": "http://www.securitytracker.com/id/1033891", "reference_id": "1033891", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033891" }, { "reference_url": "http://www.securitytracker.com/id/1033991", "reference_id": "1033991", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1033991" }, { "reference_url": "http://www.securitytracker.com/id/1034087", "reference_id": "1034087", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034087" }, { "reference_url": "http://www.securitytracker.com/id/1034728", "reference_id": "1034728", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034728" }, { "reference_url": "http://www.securitytracker.com/id/1034884", "reference_id": "1034884", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1034884" }, { "reference_url": "http://www.securitytracker.com/id/1036218", "reference_id": "1036218", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1036218" }, { "reference_url": "http://www.securitytracker.com/id/1040630", "reference_id": "1040630", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securitytracker.com/id/1040630" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223211", "reference_id": "1223211", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1223211" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html", "reference_id": "159314.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159314.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html", "reference_id": "159351.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159351.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html", "reference_id": "160117.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160117.html" }, { "reference_url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack", "reference_id": "2015-05-20-logjam-attack", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.fortiguard.com/advisory/2015-05-20-logjam-attack" }, { "reference_url": "https://openssl.org/news/secadv/20150611.txt", "reference_id": "20150611.txt", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://openssl.org/news/secadv/20150611.txt" }, { "reference_url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery", "reference_id": "2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery" }, { "reference_url": "http://www.securityfocus.com/bid/74733", "reference_id": "74733", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securityfocus.com/bid/74733" }, { "reference_url": "http://openwall.com/lists/oss-security/2015/05/20/8", "reference_id": "8", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://openwall.com/lists/oss-security/2015/05/20/8" }, { "reference_url": "http://www.securityfocus.com/bid/91787", "reference_id": "91787", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.securityfocus.com/bid/91787" }, { "reference_url": "http://support.citrix.com/article/CTX201114", "reference_id": "CTX201114", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.citrix.com/article/CTX201114" }, { "reference_url": "https://support.citrix.com/article/CTX216642", "reference_id": "CTX216642", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://support.citrix.com/article/CTX216642" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000", "reference_id": "CVE-2015-4000", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000" }, { "reference_url": "https://puppet.com/security/cve/CVE-2015-4000", "reference_id": "CVE-2015-4000", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://puppet.com/security/cve/CVE-2015-4000" }, { "reference_url": "https://www.suse.com/security/cve/CVE-2015-4000.html", "reference_id": "CVE-2015-4000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.suse.com/security/cve/CVE-2015-4000.html" }, { "reference_url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196", "reference_id": "display?docId=emr_na-c04718196", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04718196" }, { "reference_url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402", "reference_id": "display?docId=emr_na-c04876402", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04876402" }, { "reference_url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778", "reference_id": "display?docId=emr_na-c04949778", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04949778" }, { "reference_url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us", "reference_id": "display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03831en_us" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527", "reference_id": "docDisplay?docId=emr_na-c04740527", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04740527" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140", "reference_id": "docDisplay?docId=emr_na-c04770140", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04770140" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190", "reference_id": "docDisplay?docId=emr_na-c04772190", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119", "reference_id": "docDisplay?docId=emr_na-c04773119", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773119" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241", "reference_id": "docDisplay?docId=emr_na-c04773241", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04773241" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246", "reference_id": "docDisplay?docId=emr_na-c04832246", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839", "reference_id": "docDisplay?docId=emr_na-c04918839", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04918839" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929", "reference_id": "docDisplay?docId=emr_na-c04923929", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04923929" }, { "reference_url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789", "reference_id": "docDisplay?docId=emr_na-c04926789", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04926789" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655", "reference_id": "docDisplay?docId=emr_na-c04953655", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04953655" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763", "reference_id": "docDisplay?docId=emr_na-c05045763", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722", "reference_id": "docDisplay?docId=emr_na-c05128722", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128722" }, { "reference_url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083", "reference_id": "docDisplay?docId=emr_na-c05193083", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05193083" }, { "reference_url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403", "reference_id": "docdisplay?lndocid=MIGR-5098403", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5098403" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984", "reference_id": "docview.wss?uid=swg21958984", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21958984" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111", "reference_id": "docview.wss?uid=swg21959111", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959111" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132", "reference_id": "docview.wss?uid=swg21959132", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21959132" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195", "reference_id": "docview.wss?uid=swg21959195", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959195" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325", "reference_id": "docview.wss?uid=swg21959325", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959325" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453", "reference_id": "docview.wss?uid=swg21959453", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959453" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481", "reference_id": "docview.wss?uid=swg21959481", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959481" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517", "reference_id": "docview.wss?uid=swg21959517", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959517" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530", "reference_id": "docview.wss?uid=swg21959530", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959530" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539", "reference_id": "docview.wss?uid=swg21959539", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959539" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636", "reference_id": "docview.wss?uid=swg21959636", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959636" }, { "reference_url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745", "reference_id": "docview.wss?uid=swg21959745", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www-304.ibm.com/support/docview.wss?uid=swg21959745" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812", "reference_id": "docview.wss?uid=swg21959812", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21959812" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041", "reference_id": "docview.wss?uid=swg21960041", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960041" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191", "reference_id": "docview.wss?uid=swg21960191", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21960191" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194", "reference_id": "docview.wss?uid=swg21960194", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960194" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380", "reference_id": "docview.wss?uid=swg21960380", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960380" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418", "reference_id": "docview.wss?uid=swg21960418", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21960418" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717", "reference_id": "docview.wss?uid=swg21961717", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21961717" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455", "reference_id": "docview.wss?uid=swg21962455", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962455" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739", "reference_id": "docview.wss?uid=swg21962739", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21962739" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816", "reference_id": "docview.wss?uid=swg21962816", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21962816" }, { "reference_url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893", "reference_id": "docview.wss?uid=swg21967893", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www-304.ibm.com/support/docview.wss?uid=swg21967893" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3287", "reference_id": "dsa-3287", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3287" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3300", "reference_id": "dsa-3300", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3300" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3316", "reference_id": "dsa-3316", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3316" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3324", "reference_id": "dsa-3324", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3324" }, { "reference_url": "http://www.debian.org/security/2015/dsa-3339", "reference_id": "dsa-3339", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2015/dsa-3339" }, { "reference_url": "http://www.debian.org/security/2016/dsa-3688", "reference_id": "dsa-3688", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.debian.org/security/2016/dsa-3688" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://security.gentoo.org/glsa/201512-10", "reference_id": "GLSA-201512-10", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201512-10" }, { "reference_url": "https://security.gentoo.org/glsa/201603-11", "reference_id": "GLSA-201603-11", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201603-11" }, { "reference_url": "https://security.gentoo.org/glsa/201605-06", "reference_id": "GLSA-201605-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201605-06" }, { "reference_url": "https://security.gentoo.org/glsa/201701-46", "reference_id": "GLSA-201701-46", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.gentoo.org/glsa/201701-46" }, { "reference_url": "http://support.apple.com/kb/HT204941", "reference_id": "HT204941", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.apple.com/kb/HT204941" }, { "reference_url": "http://support.apple.com/kb/HT204942", "reference_id": "HT204942", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://support.apple.com/kb/HT204942" }, { "reference_url": "https://weakdh.org/imperfect-forward-secrecy.pdf", "reference_id": "imperfect-forward-secrecy.pdf", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://weakdh.org/imperfect-forward-secrecy.pdf" }, { "reference_url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681", "reference_id": "index?page=content&id=JSA10681", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10681" }, { "reference_url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727", "reference_id": "index?page=content&id=JSA10727", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10727" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10122", "reference_id": "index?page=content&id=SB10122", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10122" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143506486712441&w=2", "reference_id": "?l=bugtraq&m=143506486712441&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143506486712441&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143557934009303&w=2", "reference_id": "?l=bugtraq&m=143557934009303&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143557934009303&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143558092609708&w=2", "reference_id": "?l=bugtraq&m=143558092609708&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143558092609708&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143628304012255&w=2", "reference_id": "?l=bugtraq&m=143628304012255&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143628304012255&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143637549705650&w=2", "reference_id": "?l=bugtraq&m=143637549705650&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143637549705650&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143655800220052&w=2", "reference_id": "?l=bugtraq&m=143655800220052&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143655800220052&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=143880121627664&w=2", "reference_id": "?l=bugtraq&m=143880121627664&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=143880121627664&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144043644216842&w=2", "reference_id": "?l=bugtraq&m=144043644216842&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144043644216842&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144050121701297&w=2", "reference_id": "?l=bugtraq&m=144050121701297&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144050121701297&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144060576831314&w=2", "reference_id": "?l=bugtraq&m=144060576831314&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144060576831314&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144060606031437&w=2", "reference_id": "?l=bugtraq&m=144060606031437&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144060606031437&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144061542602287&w=2", "reference_id": "?l=bugtraq&m=144061542602287&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144061542602287&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144069189622016&w=2", "reference_id": "?l=bugtraq&m=144069189622016&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144069189622016&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144102017024820&w=2", "reference_id": "?l=bugtraq&m=144102017024820&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144102017024820&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144104533800819&w=2", "reference_id": "?l=bugtraq&m=144104533800819&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144104533800819&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=144493176821532&w=2", "reference_id": "?l=bugtraq&m=144493176821532&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=144493176821532&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=145409266329539&w=2", "reference_id": "?l=bugtraq&m=145409266329539&w=2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://marc.info/?l=bugtraq&m=145409266329539&w=2" }, { "reference_url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/", "reference_id": "logjam-freak-upcoming-changes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.openssl.org/blog/blog/2015/05/20/logjam-freak-upcoming-changes/" }, { "reference_url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/", "reference_id": "logjam-the-latest-tls-vulnerability-explained", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://blog.cloudflare.com/logjam-the-latest-tls-vulnerability-explained/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-70", "reference_id": "mfsa2015-70", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-70" }, { "reference_url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html", "reference_id": "mfsa2015-70.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.mozilla.org/security/announce/2015/mfsa2015-70.html" }, { "reference_url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00001.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html", "reference_id": "msg00001.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00001.html" }, { "reference_url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html", "reference_id": "msg00002.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html", "reference_id": "msg00003.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00003.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html", "reference_id": "msg00004.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00004.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html", "reference_id": "msg00005.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00005.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html", "reference_id": "msg00006.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00006.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html", "reference_id": "msg00007.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00007.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html", "reference_id": "msg00011.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00011.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html", "reference_id": "msg00016.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2015-07/msg00016.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html", "reference_id": "msg00017.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html", "reference_id": "msg00021.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00023.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html", "reference_id": "msg00025.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html", "reference_id": "msg00026.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00026.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html", "reference_id": "msg00031.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html", "reference_id": "msg00031.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00031.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html", "reference_id": "msg00032.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00032.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html", "reference_id": "msg00033.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html", "reference_id": "msg00034.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html", "reference_id": "msg00037.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00037.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html", "reference_id": "msg00037.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00037.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html", "reference_id": "msg00039.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00039.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html", "reference_id": "msg00039.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00039.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html", "reference_id": "msg00040.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00040.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html", "reference_id": "msg00040.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00040.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html", "reference_id": "msg00046.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00046.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html", "reference_id": "msg00047.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00047.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html", "reference_id": "msg00094.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00094.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html", "reference_id": "msg00097.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2016-02/msg00097.html" }, { "reference_url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc", "reference_id": "NetBSD-SA2015-008.txt.asc", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc" }, { "reference_url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes", "reference_id": "NSS_3.19.1_release_notes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.1_release_notes" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20150619-0001/", "reference_id": "ntap-20150619-0001", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20150619-0001/" }, { "reference_url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm", "reference_id": "releaseNotes.htm", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/releaseNotes.htm" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1072", "reference_id": "RHSA-2015:1072", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1072" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html", "reference_id": "RHSA-2015-1072.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1072.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1185", "reference_id": "RHSA-2015:1185", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1185" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html", "reference_id": "RHSA-2015-1185.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1185.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html", "reference_id": "RHSA-2015-1197.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1197.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1228", "reference_id": "RHSA-2015:1228", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1228" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html", "reference_id": "RHSA-2015-1228.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1228.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1229", "reference_id": "RHSA-2015:1229", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1229" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html", "reference_id": "RHSA-2015-1229.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1229.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1230", "reference_id": "RHSA-2015:1230", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1230" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html", "reference_id": "RHSA-2015-1230.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1230.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1241", "reference_id": "RHSA-2015:1241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1241" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html", "reference_id": "RHSA-2015-1241.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1241.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1242", "reference_id": "RHSA-2015:1242", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1242" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html", "reference_id": "RHSA-2015-1242.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1242.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1243", "reference_id": "RHSA-2015:1243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1243" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html", "reference_id": "RHSA-2015-1243.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1243.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1485", "reference_id": "RHSA-2015:1485", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1485" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html", "reference_id": "RHSA-2015-1485.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1485.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1486", "reference_id": "RHSA-2015:1486", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1486" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html", "reference_id": "RHSA-2015-1486.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1486.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1488", "reference_id": "RHSA-2015:1488", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1488" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html", "reference_id": "RHSA-2015-1488.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1488.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1526", "reference_id": "RHSA-2015:1526", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1526" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html", "reference_id": "RHSA-2015-1526.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1526.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1544", "reference_id": "RHSA-2015:1544", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1544" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html", "reference_id": "RHSA-2015-1544.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1544.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1604", "reference_id": "RHSA-2015:1604", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1604" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html", "reference_id": "RHSA-2015-1604.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-1604.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html", "reference_id": "RHSA-2016-1624.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2016-1624.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://bto.bluecoat.com/security-advisory/sa98", "reference_id": "sa98", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://bto.bluecoat.com/security-advisory/sa98" }, { "reference_url": "https://www.openssl.org/news/secadv_20150611.txt", "reference_id": "secadv_20150611.txt", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://www.openssl.org/news/secadv_20150611.txt" }, { "reference_url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc", "reference_id": "sendmail_advisory2.asc", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://aix.software.ibm.com/aix/efixes/security/sendmail_advisory2.asc" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554", "reference_id": "show_bug.cgi?id=1138554", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1138554" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf", "reference_id": "ssa-412672.pdf", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf" }, { "reference_url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes", "reference_id": "StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes" }, { "reference_url": "https://usn.ubuntu.com/2656-1/", "reference_id": "USN-2656-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2656-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2656-1", "reference_id": "USN-2656-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2656-1" }, { "reference_url": "https://usn.ubuntu.com/2656-2/", "reference_id": "USN-2656-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2656-2/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2656-2", "reference_id": "USN-2656-2", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2656-2" }, { "reference_url": "https://usn.ubuntu.com/2673-1/", "reference_id": "USN-2673-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2673-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2673-1", "reference_id": "USN-2673-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2673-1" }, { "reference_url": "https://usn.ubuntu.com/2696-1/", "reference_id": "USN-2696-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2696-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2696-1", "reference_id": "USN-2696-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2696-1" }, { "reference_url": "https://usn.ubuntu.com/2706-1/", "reference_id": "USN-2706-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2706-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2706-1", "reference_id": "USN-2706-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2706-1" }, { "reference_url": "https://weakdh.org/", "reference_id": "weakdh.org", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-27T16:22:15Z/" } ], "url": "https://weakdh.org/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-4000" ], "risk_score": 7.2, "exploitability": "2.0", "weighted_severity": "3.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7gkv-pu79-43hx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97123?format=api", "vulnerability_id": "VCID-7wh9-yyhq-17bd", "summary": "Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0209.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83779", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83803", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83804", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01946", "scoring_system": "epss", "scoring_elements": "0.83799", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196737", "reference_id": "1196737", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1196737" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1089", "reference_id": "RHSA-2016:1089", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1089" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0209" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7wh9-yyhq-17bd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2961?format=api", "vulnerability_id": "VCID-81zk-xrsj-cufe", "summary": "Security researcher Karthikeyan Bhargavan reported an issue\nin Network Security Services (NSS) where MD5 signatures in the server signature within the\nTLS 1.2 ServerKeyExchange message are still accepted. This is an issue since NSS has\nofficially disallowed the accepting MD5 as a hash algorithm in signatures since 2011. This\nissues exposes NSS based clients such as Firefox to theoretical collision-based forgery\nattacks. This issue was fixed in NSS version 3.20.2.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7575.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7575", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78075", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78102", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78109", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0107", "scoring_system": "epss", "scoring_elements": "0.78099", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4734" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4806" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4835" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4842" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4843" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4844" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4860" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4872" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4881" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4882" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4883" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4893" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4903" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4911" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0402" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0448" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0466" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0483" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0494" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1526", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1526" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289841", "reference_id": "1289841", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289841" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575", "reference_id": "CVE-2015-7575", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575" }, { "reference_url": "https://security.gentoo.org/glsa/201605-06", "reference_id": "GLSA-201605-06", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201605-06" }, { "reference_url": "https://security.gentoo.org/glsa/201701-46", "reference_id": "GLSA-201701-46", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-46" }, { "reference_url": "https://security.gentoo.org/glsa/201706-18", "reference_id": "GLSA-201706-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201706-18" }, { "reference_url": "https://security.gentoo.org/glsa/201801-15", "reference_id": "GLSA-201801-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-15" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-150", "reference_id": "mfsa2015-150", "reference_type": "", "scores": [ { "value": "none", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2015-150" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0007", "reference_id": "RHSA-2016:0007", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0007" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0008", "reference_id": "RHSA-2016:0008", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0008" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0012", "reference_id": "RHSA-2016:0012", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0012" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0049", "reference_id": "RHSA-2016:0049", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0049" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0050", "reference_id": "RHSA-2016:0050", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0053", "reference_id": "RHSA-2016:0053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0054", "reference_id": "RHSA-2016:0054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0055", "reference_id": "RHSA-2016:0055", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0055" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0056", "reference_id": "RHSA-2016:0056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0098", "reference_id": "RHSA-2016:0098", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0098" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0099", "reference_id": "RHSA-2016:0099", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0099" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0100", "reference_id": "RHSA-2016:0100", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0100" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0101", "reference_id": "RHSA-2016:0101", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0101" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1430", "reference_id": "RHSA-2016:1430", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1430" }, { "reference_url": "https://usn.ubuntu.com/2863-1/", "reference_id": "USN-2863-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2863-1/" }, { "reference_url": "https://usn.ubuntu.com/2864-1/", "reference_id": "USN-2864-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2864-1/" }, { "reference_url": "https://usn.ubuntu.com/2865-1/", "reference_id": "USN-2865-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2865-1/" }, { "reference_url": "https://usn.ubuntu.com/2866-1/", "reference_id": "USN-2866-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2866-1/" }, { "reference_url": "https://usn.ubuntu.com/2884-1/", "reference_id": "USN-2884-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2884-1/" }, { "reference_url": "https://usn.ubuntu.com/2904-1/", "reference_id": "USN-2904-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2904-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-7575" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-81zk-xrsj-cufe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97153?format=api", "vulnerability_id": "VCID-8352-jtyx-mbh5", "summary": "The get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to determine the MASTER-KEY value and decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0703.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0703", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04963", "scoring_system": "epss", "scoring_elements": "0.89844", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04963", "scoring_system": "epss", "scoring_elements": "0.89859", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04963", "scoring_system": "epss", "scoring_elements": "0.8986", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04963", "scoring_system": "epss", "scoring_elements": "0.89858", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0703" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0703", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0703" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310811", "reference_id": "1310811", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310811" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0303", "reference_id": "RHSA-2016:0303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0304", "reference_id": "RHSA-2016:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0306", "reference_id": "RHSA-2016:0306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0372", "reference_id": "RHSA-2016:0372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0372" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2016-0703" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8352-jtyx-mbh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97145?format=api", "vulnerability_id": "VCID-97kv-2j1c-yuc2", "summary": "crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an RSA PSS ASN.1 signature that lacks a mask generation function parameter.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3194.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98072", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98073", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.54488", "scoring_system": "epss", "scoring_elements": "0.98074", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288320", "reference_id": "1288320", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288320" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3194" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-97kv-2j1c-yuc2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97138?format=api", "vulnerability_id": "VCID-99tx-2t22-6khg", "summary": "The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted length field in ASN1_TIME data, as demonstrated by an attack against a server that supports client authentication with a custom verification callback.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1789.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89354", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89373", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04532", "scoring_system": "epss", "scoring_elements": "0.89372", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228603", "reference_id": "1228603", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228603" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1789" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-99tx-2t22-6khg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97130?format=api", "vulnerability_id": "VCID-baum-2mwk-p7gt", "summary": "The PKCS#7 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly handle a lack of outer ContentInfo, which allows attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an application that processes arbitrary PKCS#7 data and providing malformed data with ASN.1 encoding, related to crypto/pkcs7/pk7_doit.c and crypto/pkcs7/pk7_lib.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0289.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90655", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90669", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90668", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05787", "scoring_system": "epss", "scoring_elements": "0.90666", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202384", "reference_id": "1202384", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202384" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0289" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-baum-2mwk-p7gt" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97090?format=api", "vulnerability_id": "VCID-bd3y-xkqp-w7ey", "summary": "The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0195.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.92751", "scoring_system": "epss", "scoring_elements": "0.99766", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.92751", "scoring_system": "epss", "scoring_elements": "0.99767", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103598", "reference_id": "1103598", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103598" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0195" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bd3y-xkqp-w7ey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97155?format=api", "vulnerability_id": "VCID-bkgn-85j5-tbcd", "summary": "Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0705.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95859", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95863", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95866", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.21835", "scoring_system": "epss", "scoring_elements": "0.95867", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596", "reference_id": "1310596", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310596" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2568", "reference_id": "RHSA-2018:2568", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2568" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2575", "reference_id": "RHSA-2018:2575", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2575" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:2713", "reference_id": "RHSA-2018:2713", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2018:2713" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0705" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bkgn-85j5-tbcd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97096?format=api", "vulnerability_id": "VCID-bpm2-rvhc-pfaz", "summary": "Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3505.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97447", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97453", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.40781", "scoring_system": "epss", "scoring_elements": "0.97454", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127499", "reference_id": "1127499", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127499" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3505" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bpm2-rvhc-pfaz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97102?format=api", "vulnerability_id": "VCID-bpm9-v7t1-j3d9", "summary": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3511.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.9031", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90325", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90324", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05418", "scoring_system": "epss", "scoring_elements": "0.90322", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127504", "reference_id": "1127504", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127504" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0126", "reference_id": "RHSA-2015:0126", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0126" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0197", "reference_id": "RHSA-2015:0197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0197" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3511" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bpm9-v7t1-j3d9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/95456?format=api", "vulnerability_id": "VCID-bvny-ts8d-7fcy", "summary": "The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a \"DROWN\" attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0800", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.90348", "scoring_system": "epss", "scoring_elements": "0.99617", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.90348", "scoring_system": "epss", "scoring_elements": "0.99618", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310593", "reference_id": "1310593", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310593" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0302", "reference_id": "RHSA-2016:0302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0303", "reference_id": "RHSA-2016:0303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0304", "reference_id": "RHSA-2016:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0305", "reference_id": "RHSA-2016:0305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0306", "reference_id": "RHSA-2016:0306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0372", "reference_id": "RHSA-2016:0372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0445", "reference_id": "RHSA-2016:0445", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0446", "reference_id": "RHSA-2016:0446", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0446" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0490", "reference_id": "RHSA-2016:0490", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0490" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1519", "reference_id": "RHSA-2016:1519", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1519" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2016-0800" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bvny-ts8d-7fcy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97078?format=api", "vulnerability_id": "VCID-cf17-f85n-jbf3", "summary": "The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-1165.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1165", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03102", "scoring_system": "epss", "scoring_elements": "0.8705", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03102", "scoring_system": "epss", "scoring_elements": "0.87072", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03102", "scoring_system": "epss", "scoring_elements": "0.8707", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03102", "scoring_system": "epss", "scoring_elements": "0.87064", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1165" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1165", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1165" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663642", "reference_id": "663642", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663642" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=802489", "reference_id": "802489", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=802489" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0426", "reference_id": "RHSA-2012:0426", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0426" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1424-1/", "reference_id": "USN-1424-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1424-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-1165" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cf17-f85n-jbf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97116?format=api", "vulnerability_id": "VCID-chgs-b5zr-2uey", "summary": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and facilitate brute-force decryption by offering a weak ephemeral RSA key in a noncompliant role, related to the \"FREAK\" issue. NOTE: the scope of this CVE is only client code based on OpenSSL, not EXPORT_RSA issues associated with servers or other TLS implementations.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0204.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91945", "scoring_system": "epss", "scoring_elements": "0.99712", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "10", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:C/I:C/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180184", "reference_id": "1180184", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180184" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0849", "reference_id": "RHSA-2015:0849", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0204" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-chgs-b5zr-2uey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97128?format=api", "vulnerability_id": "VCID-d6qb-nwa5-k7ap", "summary": "The ASN1_item_ex_d2i function in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service (invalid write operation and memory corruption) by leveraging an application that relies on ASN.1 structure reuse.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0287.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89813", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89829", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.8983", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04942", "scoring_system": "epss", "scoring_elements": "0.89828", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202380", "reference_id": "1202380", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202380" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0287" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d6qb-nwa5-k7ap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97088?format=api", "vulnerability_id": "VCID-d8gm-d7ng-1bam", "summary": "The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0076.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58454", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58501", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.5851", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0036", "scoring_system": "epss", "scoring_elements": "0.58502", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0076" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080276", "reference_id": "1080276", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1080276" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742923", "reference_id": "742923", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742923" }, { "reference_url": "https://security.gentoo.org/glsa/201404-07", "reference_id": "GLSA-201404-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201404-07" }, { "reference_url": "https://usn.ubuntu.com/2165-1/", "reference_id": "USN-2165-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2165-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0076" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d8gm-d7ng-1bam" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97141?format=api", "vulnerability_id": "VCID-d9rt-g2k8-pbey", "summary": "The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (infinite loop) via vectors that trigger a NULL value of a BIO data structure, as demonstrated by an unrecognized X.660 OID for a hash function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1792.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94014", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94023", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94022", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.12357", "scoring_system": "epss", "scoring_elements": "0.94025", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1792" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228607", "reference_id": "1228607", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228607" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1792" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d9rt-g2k8-pbey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97118?format=api", "vulnerability_id": "VCID-dvr1-aacj-67b3", "summary": "Memory leak in the dtls1_buffer_record function in d1_pkt.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate records for the next epoch, leading to failure of replay detection.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0206.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96839", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96843", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96847", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.31073", "scoring_system": "epss", "scoring_elements": "0.96848", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0206" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180235", "reference_id": "1180235", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180235" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0206" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dvr1-aacj-67b3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97092?format=api", "vulnerability_id": "VCID-e5ah-km4p-pbcx", "summary": "The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0221.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.82097", "scoring_system": "epss", "scoring_elements": "0.9923", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.82097", "scoring_system": "epss", "scoring_elements": "0.99231", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593", "reference_id": "1103593", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103593" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1021", "reference_id": "RHSA-2014:1021", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1021" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1086", "reference_id": "RHSA-2014:1086", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1086" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0221" ], "risk_score": 1.4, "exploitability": "2.0", "weighted_severity": "0.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e5ah-km4p-pbcx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97140?format=api", "vulnerability_id": "VCID-e8wv-nh7t-g3ey", "summary": "Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact by providing a NewSessionTicket during an attempt to reuse a ticket that had been obtained earlier.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1791.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.9329", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93301", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93302", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.10249", "scoring_system": "epss", "scoring_elements": "0.93299", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228608", "reference_id": "1228608", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228608" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1791" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e8wv-nh7t-g3ey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97103?format=api", "vulnerability_id": "VCID-ev86-zmde-sfep", "summary": "Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3512.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.9742", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.97426", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.4021", "scoring_system": "epss", "scoring_elements": "0.97427", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127505", "reference_id": "1127505", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127505" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3512" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ev86-zmde-sfep" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97135?format=api", "vulnerability_id": "VCID-fmry-6z1g-tkaw", "summary": "The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (s2_lib.c assertion failure and daemon exit) via a crafted CLIENT-MASTER-KEY message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0293.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0293", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.06036", "scoring_system": "epss", "scoring_elements": "0.90883", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.06036", "scoring_system": "epss", "scoring_elements": "0.90897", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.06036", "scoring_system": "epss", "scoring_elements": "0.90894", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0293" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0293" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202404", "reference_id": "1202404", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202404" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0303", "reference_id": "RHSA-2016:0303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0304", "reference_id": "RHSA-2016:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0306", "reference_id": "RHSA-2016:0306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0372", "reference_id": "RHSA-2016:0372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0445", "reference_id": "RHSA-2016:0445", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0446", "reference_id": "RHSA-2016:0446", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0446" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0490", "reference_id": "RHSA-2016:0490", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0490" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2015-0293" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fmry-6z1g-tkaw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97064?format=api", "vulnerability_id": "VCID-gjjr-v24d-vbfw", "summary": "The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients, which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3210.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3210", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05863", "scoring_system": "epss", "scoring_elements": "0.90728", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.05863", "scoring_system": "epss", "scoring_elements": "0.9074", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.05863", "scoring_system": "epss", "scoring_elements": "0.90737", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3210" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3210" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=736079", "reference_id": "736079", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=736079" }, { "reference_url": "https://security.gentoo.org/glsa/201110-01", "reference_id": "GLSA-201110-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-01" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-3210" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gjjr-v24d-vbfw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97062?format=api", "vulnerability_id": "VCID-h7ar-2kb5-1ydm", "summary": "crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3207.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3207", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01509", "scoring_system": "epss", "scoring_elements": "0.8152", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01509", "scoring_system": "epss", "scoring_elements": "0.81548", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01509", "scoring_system": "epss", "scoring_elements": "0.8155", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01509", "scoring_system": "epss", "scoring_elements": "0.81549", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3207" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3207" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=736087", "reference_id": "736087", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=736087" }, { "reference_url": "https://security.gentoo.org/glsa/201110-01", "reference_id": "GLSA-201110-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-01" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1409", "reference_id": "RHSA-2011:1409", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1409" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-3207" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h7ar-2kb5-1ydm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97081?format=api", "vulnerability_id": "VCID-hm3v-bzq3-pkc5", "summary": "Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2333.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2333", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.06763", "scoring_system": "epss", "scoring_elements": "0.91459", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.06763", "scoring_system": "epss", "scoring_elements": "0.91473", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.06763", "scoring_system": "epss", "scoring_elements": "0.91475", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2333" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2333", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2333" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672452", "reference_id": "672452", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=672452" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=820686", "reference_id": "820686", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=820686" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0699", "reference_id": "RHSA-2012:0699", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0699" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1451-1/", "reference_id": "USN-1451-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1451-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-2333" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hm3v-bzq3-pkc5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97115?format=api", "vulnerability_id": "VCID-htwq-dece-p3e2", "summary": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, related to crypto/asn1/a_verify.c, crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, and crypto/x509/x_all.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8275.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92641", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92654", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.9265", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08728", "scoring_system": "epss", "scoring_elements": "0.92645", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180187", "reference_id": "1180187", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180187" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-8275" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-htwq-dece-p3e2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97139?format=api", "vulnerability_id": "VCID-hvx5-c491-sba7", "summary": "The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a PKCS#7 blob that uses ASN.1 encoding and lacks inner EncryptedContent data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1790.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93029", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.9304", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93037", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09615", "scoring_system": "epss", "scoring_elements": "0.93033", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228604", "reference_id": "1228604", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228604" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1197", "reference_id": "RHSA-2015:1197", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1197" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1790" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hvx5-c491-sba7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97154?format=api", "vulnerability_id": "VCID-hxzt-awwe-aybp", "summary": "An oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a overwrites incorrect MASTER-KEY bytes during use of export cipher suites, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, a related issue to CVE-2016-0800.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0704.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0704", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07651", "scoring_system": "epss", "scoring_elements": "0.92034", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07651", "scoring_system": "epss", "scoring_elements": "0.92046", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07651", "scoring_system": "epss", "scoring_elements": "0.92044", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07651", "scoring_system": "epss", "scoring_elements": "0.92043", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0704" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0704", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0704" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310814", "reference_id": "1310814", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310814" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0303", "reference_id": "RHSA-2016:0303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0304", "reference_id": "RHSA-2016:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0306", "reference_id": "RHSA-2016:0306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0372", "reference_id": "RHSA-2016:0372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0372" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2016-0704" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hxzt-awwe-aybp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97086?format=api", "vulnerability_id": "VCID-hyyj-mu1w-buf4", "summary": "The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6449.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97733", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97736", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.46976", "scoring_system": "epss", "scoring_elements": "0.97738", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045363", "reference_id": "1045363", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045363" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732754", "reference_id": "732754", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732754" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0041", "reference_id": "RHSA-2014:0041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0041" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-6449" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.4", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hyyj-mu1w-buf4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97156?format=api", "vulnerability_id": "VCID-hz7k-w38p-mbbg", "summary": "Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0797.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97213", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97217", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97219", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.36537", "scoring_system": "epss", "scoring_elements": "0.97221", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311880", "reference_id": "1311880", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311880" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0302", "reference_id": "RHSA-2016:0302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0797" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hz7k-w38p-mbbg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97029?format=api", "vulnerability_id": "VCID-j3fz-um8d-7ybz", "summary": "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-7250.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2006-7250", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01998", "scoring_system": "epss", "scoring_elements": "0.83971", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01998", "scoring_system": "epss", "scoring_elements": "0.83994", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01998", "scoring_system": "epss", "scoring_elements": "0.83996", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01998", "scoring_system": "epss", "scoring_elements": "0.83992", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2006-7250" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7250", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7250" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100", "reference_id": "798100", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=798100" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2009:1335", "reference_id": "RHSA-2009:1335", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2009:1335" }, { "reference_url": "https://usn.ubuntu.com/1424-1/", "reference_id": "USN-1424-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1424-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2006-7250" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j3fz-um8d-7ybz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97077?format=api", "vulnerability_id": "VCID-jcm7-f3s4-y7d1", "summary": "The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0884.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0884", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02774", "scoring_system": "epss", "scoring_elements": "0.8632", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02774", "scoring_system": "epss", "scoring_elements": "0.86342", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02774", "scoring_system": "epss", "scoring_elements": "0.86344", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02774", "scoring_system": "epss", "scoring_elements": "0.8634", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0884" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0884" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=802725", "reference_id": "802725", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=802725" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0426", "reference_id": "RHSA-2012:0426", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0426" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1451-1/", "reference_id": "USN-1451-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1451-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-0884" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jcm7-f3s4-y7d1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97110?format=api", "vulnerability_id": "VCID-jkx1-qxrh-4feh", "summary": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3571.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96884", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96888", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.31582", "scoring_system": "epss", "scoring_elements": "0.96892", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180234", "reference_id": "1180234", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180234" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3571" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jkx1-qxrh-4feh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97052?format=api", "vulnerability_id": "VCID-jxpg-65kh-eyhs", "summary": "The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0742.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-0742", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.22108", "scoring_system": "epss", "scoring_elements": "0.95897", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.22108", "scoring_system": "epss", "scoring_elements": "0.95901", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.22108", "scoring_system": "epss", "scoring_elements": "0.95905", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-0742" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0742" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584592", "reference_id": "584592", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584592" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=598738", "reference_id": "598738", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=598738" }, { "reference_url": "https://security.gentoo.org/glsa/201110-01", "reference_id": "GLSA-201110-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-01" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2010-0742" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jxpg-65kh-eyhs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97104?format=api", "vulnerability_id": "VCID-k9fk-ygea-9bf1", "summary": "Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3513.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97322", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97326", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97327", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.38443", "scoring_system": "epss", "scoring_elements": "0.97328", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152953", "reference_id": "1152953", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152953" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1652", "reference_id": "RHSA-2014:1652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1692", "reference_id": "RHSA-2014:1692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1692" }, { "reference_url": "https://usn.ubuntu.com/2385-1/", "reference_id": "USN-2385-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2385-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3513" ], "risk_score": 1.3, "exploitability": "0.5", "weighted_severity": "2.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k9fk-ygea-9bf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97133?format=api", "vulnerability_id": "VCID-ke5z-ndd2-duhm", "summary": "Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted base64 data that triggers a buffer overflow.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0292.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91295", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91307", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91308", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0654", "scoring_system": "epss", "scoring_elements": "0.91304", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0292" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202395", "reference_id": "1202395", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202395" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0292" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ke5z-ndd2-duhm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97093?format=api", "vulnerability_id": "VCID-kpyv-ydcz-1qev", "summary": "OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0224.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99584", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99585", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.89694", "scoring_system": "epss", "scoring_elements": "0.99586", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103586", "reference_id": "1103586", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103586" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0624", "reference_id": "RHSA-2014:0624", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0624" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0626", "reference_id": "RHSA-2014:0626", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0626" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0627", "reference_id": "RHSA-2014:0627", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0627" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0629", "reference_id": "RHSA-2014:0629", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0629" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0630", "reference_id": "RHSA-2014:0630", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0630" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0631", "reference_id": "RHSA-2014:0631", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0631" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0632", "reference_id": "RHSA-2014:0632", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0632" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0633", "reference_id": "RHSA-2014:0633", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0633" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0680", "reference_id": "RHSA-2014:0680", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0680" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0224" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kpyv-ydcz-1qev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97097?format=api", "vulnerability_id": "VCID-m4u4-7g9x-qbh5", "summary": "d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3506.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.51729", "scoring_system": "epss", "scoring_elements": "0.97952", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.51729", "scoring_system": "epss", "scoring_elements": "0.97955", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127500", "reference_id": "1127500", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127500" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3506" ], "risk_score": 0.2, "exploitability": "0.5", "weighted_severity": "0.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m4u4-7g9x-qbh5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97098?format=api", "vulnerability_id": "VCID-megu-ghcn-83ez", "summary": "Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3507.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98532", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98535", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.66025", "scoring_system": "epss", "scoring_elements": "0.98534", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127502", "reference_id": "1127502", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127502" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3507" ], "risk_score": 0.3, "exploitability": "0.5", "weighted_severity": "0.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-megu-ghcn-83ez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97084?format=api", "vulnerability_id": "VCID-ms3b-bbd5-87ex", "summary": "OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0166.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0166", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09511", "scoring_system": "epss", "scoring_elements": "0.92991", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.09511", "scoring_system": "epss", "scoring_elements": "0.93001", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.09511", "scoring_system": "epss", "scoring_elements": "0.92998", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09511", "scoring_system": "epss", "scoring_elements": "0.92994", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0166" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0166" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889", "reference_id": "699889", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=908052", "reference_id": "908052", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908052" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0587", "reference_id": "RHSA-2013:0587", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0587" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0636", "reference_id": "RHSA-2013:0636", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0636" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0782", "reference_id": "RHSA-2013:0782", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0782" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0783", "reference_id": "RHSA-2013:0783", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0783" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0833", "reference_id": "RHSA-2013:0833", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0833" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1013", "reference_id": "RHSA-2013:1013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1013" }, { "reference_url": "https://usn.ubuntu.com/1732-1/", "reference_id": "USN-1732-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1732-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2013-0166" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ms3b-bbd5-87ex" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97148?format=api", "vulnerability_id": "VCID-mscw-k3cm-b3gd", "summary": "ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3197.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3197", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.22185", "scoring_system": "epss", "scoring_elements": "0.95907", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.22185", "scoring_system": "epss", "scoring_elements": "0.95911", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.22185", "scoring_system": "epss", "scoring_elements": "0.95914", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.22185", "scoring_system": "epss", "scoring_elements": "0.95915", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3197" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3197", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3197" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301846", "reference_id": "1301846", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1301846" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0302", "reference_id": "RHSA-2016:0302", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0302" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0303", "reference_id": "RHSA-2016:0303", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0303" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0304", "reference_id": "RHSA-2016:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0305", "reference_id": "RHSA-2016:0305", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0305" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0306", "reference_id": "RHSA-2016:0306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0372", "reference_id": "RHSA-2016:0372", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0372" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0445", "reference_id": "RHSA-2016:0445", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0445" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0446", "reference_id": "RHSA-2016:0446", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0446" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0490", "reference_id": "RHSA-2016:0490", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0490" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2015-3197" ], "risk_score": 1.1, "exploitability": "0.5", "weighted_severity": "2.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mscw-k3cm-b3gd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97146?format=api", "vulnerability_id": "VCID-nasm-fjhp-9beh", "summary": "The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3195.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.87787", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.87808", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03481", "scoring_system": "epss", "scoring_elements": "0.8781", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288322", "reference_id": "1288322", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288322" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2616", "reference_id": "RHSA-2015:2616", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2616" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2056", "reference_id": "RHSA-2016:2056", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2056" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3195" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nasm-fjhp-9beh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97147?format=api", "vulnerability_id": "VCID-nbqq-cyvt-y7hj", "summary": "ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted ServerKeyExchange message.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3196.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91825", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91838", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91839", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07321", "scoring_system": "epss", "scoring_elements": "0.91836", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3196" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3194" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3196" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288326", "reference_id": "1288326", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1288326" }, { "reference_url": "https://security.gentoo.org/glsa/201601-05", "reference_id": "GLSA-201601-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201601-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:2617", "reference_id": "RHSA-2015:2617", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:2617" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2830-1/", "reference_id": "USN-2830-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2830-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-3196" ], "risk_score": 1.2, "exploitability": "0.5", "weighted_severity": "2.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqq-cyvt-y7hj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97095?format=api", "vulnerability_id": "VCID-nf4z-1rdg-5kbu", "summary": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3470.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.91395", "scoring_system": "epss", "scoring_elements": "0.99677", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.91395", "scoring_system": "epss", "scoring_elements": "0.99678", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3470" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0195" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0221" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0224" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3470" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103600", "reference_id": "1103600", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1103600" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665", "reference_id": "750665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750665" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2232-1/", "reference_id": "USN-2232-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2232-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3470" ], "risk_score": 1.6, "exploitability": "2.0", "weighted_severity": "0.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nf4z-1rdg-5kbu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97067?format=api", "vulnerability_id": "VCID-nrw9-57ey-q7d9", "summary": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4109.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4109", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02648", "scoring_system": "epss", "scoring_elements": "0.86032", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02648", "scoring_system": "epss", "scoring_elements": "0.86053", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02648", "scoring_system": "epss", "scoring_elements": "0.86056", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02648", "scoring_system": "epss", "scoring_elements": "0.86052", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4109" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4109", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4109" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771771", "reference_id": "771771", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771771" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0060", "reference_id": "RHSA-2012:0060", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0060" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-4109" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nrw9-57ey-q7d9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97113?format=api", "vulnerability_id": "VCID-nyxa-6hvt-3udy", "summary": "The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structures without considering that application data can arrive between a ChangeCipherSpec message and a Finished message, which allows remote DTLS peers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unexpected application data.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8176.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.95826", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.9583", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21559", "scoring_system": "epss", "scoring_elements": "0.95833", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228611", "reference_id": "1228611", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228611" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1115", "reference_id": "RHSA-2015:1115", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1115" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" } ], "aliases": [ "CVE-2014-8176" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nyxa-6hvt-3udy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97109?format=api", "vulnerability_id": "VCID-pms8-rgdk-xbcn", "summary": "The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3570.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91801", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91813", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91816", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07282", "scoring_system": "epss", "scoring_elements": "0.91814", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180240", "reference_id": "1180240", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180240" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0849", "reference_id": "RHSA-2015:0849", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:1650", "reference_id": "RHSA-2016:1650", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:1650" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3570" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pms8-rgdk-xbcn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97107?format=api", "vulnerability_id": "VCID-ppb8-ewtj-pqat", "summary": "OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3568.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89536", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89554", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89553", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04693", "scoring_system": "epss", "scoring_elements": "0.89551", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3568" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152967", "reference_id": "1152967", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152967" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3568" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ppb8-ewtj-pqat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97137?format=api", "vulnerability_id": "VCID-qxy5-81tu-cuh4", "summary": "The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows remote attackers to cause a denial of service (infinite loop) via a session that uses an Elliptic Curve algorithm, as demonstrated by an attack against a server that supports client authentication.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1788.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94879", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94887", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.15914", "scoring_system": "epss", "scoring_elements": "0.94889", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8176" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1788" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1789" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1790" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1791" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1792" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228600", "reference_id": "1228600", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1228600" }, { "reference_url": "https://security.gentoo.org/glsa/201506-02", "reference_id": "GLSA-201506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201506-02" }, { "reference_url": "https://usn.ubuntu.com/2639-1/", "reference_id": "USN-2639-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2639-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2015-1788" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qxy5-81tu-cuh4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97089?format=api", "vulnerability_id": "VCID-rnz3-9s3x-9fhg", "summary": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0160.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0160", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.94464", "scoring_system": "epss", "scoring_elements": "0.99996", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0160" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160" }, { "reference_url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html", "reference_id": "000184.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.balabit.hu/pipermail/syslog-ng-announce/2014-April/000184.html" }, { "reference_url": "http://www.securitytracker.com/id/1030026", "reference_id": "1030026", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030026" }, { "reference_url": "http://www.securitytracker.com/id/1030074", "reference_id": "1030074", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030074" }, { "reference_url": "http://www.securitytracker.com/id/1030077", "reference_id": "1030077", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030077" }, { "reference_url": "http://www.securitytracker.com/id/1030078", "reference_id": "1030078", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030078" }, { "reference_url": "http://www.securitytracker.com/id/1030079", "reference_id": "1030079", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030079" }, { "reference_url": "http://www.securitytracker.com/id/1030080", "reference_id": "1030080", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030080" }, { "reference_url": "http://www.securitytracker.com/id/1030081", "reference_id": "1030081", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030081" }, { "reference_url": "http://www.securitytracker.com/id/1030082", "reference_id": "1030082", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securitytracker.com/id/1030082" }, { "reference_url": "https://gist.github.com/chapmajs/10473815", "reference_id": "10473815", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://gist.github.com/chapmajs/10473815" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875", "reference_id": "1084875", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1084875" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/109", "reference_id": "109", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/109" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html", "reference_id": "131221.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131221.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html", "reference_id": "131291.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131291.html" }, { "reference_url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html", "reference_id": "136473.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136473.html" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/173", "reference_id": "173", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/173" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/190", "reference_id": "190", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/190" }, { "reference_url": "http://www.exploit-db.com/exploits/32745", "reference_id": "32745", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.exploit-db.com/exploits/32745" }, { "reference_url": "http://www.exploit-db.com/exploits/32764", "reference_id": "32764", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.exploit-db.com/exploits/32764" }, { "reference_url": "http://secunia.com/advisories/57347", "reference_id": "57347", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57347" }, { "reference_url": "http://secunia.com/advisories/57483", "reference_id": "57483", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57483" }, { "reference_url": "http://secunia.com/advisories/57721", "reference_id": "57721", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57721" }, { "reference_url": "http://secunia.com/advisories/57836", "reference_id": "57836", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57836" }, { "reference_url": "http://secunia.com/advisories/57966", "reference_id": "57966", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57966" }, { "reference_url": "http://secunia.com/advisories/57968", "reference_id": "57968", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/57968" }, { "reference_url": "http://secunia.com/advisories/59139", "reference_id": "59139", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59139" }, { "reference_url": "http://secunia.com/advisories/59243", "reference_id": "59243", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59243" }, { "reference_url": "http://secunia.com/advisories/59347", "reference_id": "59347", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://secunia.com/advisories/59347" }, { "reference_url": "http://www.securityfocus.com/bid/66690", "reference_id": "66690", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.securityfocus.com/bid/66690" }, { "reference_url": "http://www.kb.cert.org/vuls/id/720951", "reference_id": "720951", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.kb.cert.org/vuls/id/720951" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743883", "reference_id": "743883", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743883" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/90", "reference_id": "90", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/90" }, { "reference_url": "http://seclists.org/fulldisclosure/2014/Apr/91", "reference_id": "91", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://seclists.org/fulldisclosure/2014/Apr/91" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062", "reference_id": "advisories?name=MDVSA-2015:062", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:062" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/", "reference_id": "chef-server-11-0-12-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-11-0-12-release/" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/", "reference_id": "chef-server-heartbleed-cve-2014-0160-releases", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/chef-server-heartbleed-cve-2014-0160-releases/" }, { "reference_url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed", "reference_id": "cisco-sa-20140409-heartbleed", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed" }, { "reference_url": "http://support.citrix.com/article/CTX140605", "reference_id": "CTX140605", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://support.citrix.com/article/CTX140605" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32764.py", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32764.py" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32791.c", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32791.c" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32998.c", "reference_id": "CVE-2014-0346;CVE-2014-0160;OSVDB-105465", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32998.c" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32745.py", "reference_id": "CVE-2014-0346;OSVDB-105465;CVE-2014-0160", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32745.py" }, { "reference_url": "https://code.google.com/p/mod-spdy/issues/detail?id=85", "reference_id": "detail?id=85", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://code.google.com/p/mod-spdy/issues/detail?id=85" }, { "reference_url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "reference_id": "detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160512_00" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841", "reference_id": "docview.wss?uid=isg400001841", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001841" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843", "reference_id": "docview.wss?uid=isg400001843", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=isg400001843" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661", "reference_id": "docview.wss?uid=ssg1S1004661", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004661" }, { "reference_url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161", "reference_id": "docview.wss?uid=swg21670161", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21670161" }, { "reference_url": "http://www.debian.org/security/2014/dsa-2896", "reference_id": "dsa-2896", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.debian.org/security/2014/dsa-2896" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/", "reference_id": "enterprise-chef-11-1-3-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/" }, { "reference_url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/", "reference_id": "enterprise-chef-1-4-9-release", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.getchef.com/blog/2014/04/09/enterprise-chef-1-4-9-release/" }, { "reference_url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E", "reference_id": "f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01", "reference_id": "files?p_Doc_Ref=SEVD%202014-119-01", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD%202014-119-01" }, { "reference_url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1", "reference_id": "fsc-2014-1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.f-secure.com/en/web/labs_global/fsc-2014-1" }, { "reference_url": "https://security.gentoo.org/glsa/201404-07", "reference_id": "GLSA-201404-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201404-07" }, { "reference_url": "https://security.gentoo.org/glsa/201412-11", "reference_id": "GLSA-201412-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-11" }, { "reference_url": "http://heartbleed.com/", "reference_id": "heartbleed.com", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://heartbleed.com/" }, { "reference_url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html", "reference_id": "heartbleed-hearts-continue-to-bleed.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://sku11army.blogspot.com/2020/01/heartbleed-hearts-continue-to-bleed.html" }, { "reference_url": "http://www.blackberry.com/btsc/KB35882", "reference_id": "KB35882", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.blackberry.com/btsc/KB35882" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2", "reference_id": "?l=bugtraq&m=139722163017074&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139722163017074&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2", "reference_id": "?l=bugtraq&m=139757726426985&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757726426985&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2", "reference_id": "?l=bugtraq&m=139757819327350&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757819327350&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2", "reference_id": "?l=bugtraq&m=139757919027752&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139757919027752&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2", "reference_id": "?l=bugtraq&m=139758572430452&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139758572430452&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2", "reference_id": "?l=bugtraq&m=139765756720506&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139765756720506&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2", "reference_id": "?l=bugtraq&m=139774054614965&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139774054614965&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2", "reference_id": "?l=bugtraq&m=139774703817488&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139774703817488&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2", "reference_id": "?l=bugtraq&m=139808058921905&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139808058921905&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2", "reference_id": "?l=bugtraq&m=139817685517037&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817685517037&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2", "reference_id": "?l=bugtraq&m=139817727317190&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817727317190&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2", "reference_id": "?l=bugtraq&m=139817782017443&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139817782017443&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2", "reference_id": "?l=bugtraq&m=139824923705461&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139824923705461&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2", "reference_id": "?l=bugtraq&m=139824993005633&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139824993005633&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2", "reference_id": "?l=bugtraq&m=139833395230364&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139833395230364&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2", "reference_id": "?l=bugtraq&m=139835815211508&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139835815211508&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2", "reference_id": "?l=bugtraq&m=139835844111589&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139835844111589&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2", "reference_id": "?l=bugtraq&m=139836085512508&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139836085512508&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2", "reference_id": "?l=bugtraq&m=139842151128341&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139842151128341&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2", "reference_id": "?l=bugtraq&m=139843768401936&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139843768401936&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2", "reference_id": "?l=bugtraq&m=139869720529462&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139869720529462&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2", "reference_id": "?l=bugtraq&m=139869891830365&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139869891830365&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2", "reference_id": "?l=bugtraq&m=139889113431619&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139889113431619&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2", "reference_id": "?l=bugtraq&m=139889295732144&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139889295732144&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2", "reference_id": "?l=bugtraq&m=139905202427693&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905202427693&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2", "reference_id": "?l=bugtraq&m=139905243827825&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905243827825&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2", "reference_id": "?l=bugtraq&m=139905295427946&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905295427946&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2", "reference_id": "?l=bugtraq&m=139905351928096&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905351928096&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2", "reference_id": "?l=bugtraq&m=139905405728262&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905405728262&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2", "reference_id": "?l=bugtraq&m=139905458328378&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905458328378&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2", "reference_id": "?l=bugtraq&m=139905653828999&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905653828999&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2", "reference_id": "?l=bugtraq&m=139905868529690&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=139905868529690&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2", "reference_id": "?l=bugtraq&m=140015787404650&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140015787404650&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2", "reference_id": "?l=bugtraq&m=140075368411126&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140075368411126&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2", "reference_id": "?l=bugtraq&m=140724451518351&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140724451518351&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2", "reference_id": "?l=bugtraq&m=140752315422991&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=140752315422991&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2", "reference_id": "?l=bugtraq&m=141287864628122&w=2", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://marc.info/?l=bugtraq&m=141287864628122&w=2" }, { "reference_url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf", "reference_id": "mdm_1.5.2.1_Release_Notes.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.innominate.com/data/downloads/manuals/mdm_1.5.2.1_Release_Notes.pdf" }, { "reference_url": "http://advisories.mageia.org/MGASA-2014-0165.html", "reference_id": "MGASA-2014-0165.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://advisories.mageia.org/MGASA-2014-0165.html" }, { "reference_url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008", "reference_id": "mitel-product-security-advisory-17-0008", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html", "reference_id": "msg00004.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00004.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html", "reference_id": "msg00005.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00005.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html", "reference_id": "msg00061.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2014-04/msg00061.html" }, { "reference_url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1", "reference_id": "NVD_Detail_Rpt.aspx?ID=1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=1" }, { "reference_url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3", "reference_id": "NVD_Detail_Rpt.aspx?ID=3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=3" }, { "reference_url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160", "reference_id": "openssl-bug-cve-2014-0160", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://blog.torproject.org/blog/openssl-bug-cve-2014-0160" }, { "reference_url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/", "reference_id": "openssl-heartbleed-bug-live-blog", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://blog.fox-it.com/2014/04/08/openssl-heartbleed-bug-live-blog/" }, { "reference_url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html", "reference_id": "opensslheartbleedcve-2014-0160-2188454.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.oracle.com/technetwork/topics/security/opensslheartbleedcve-2014-0160-2188454.html" }, { "reference_url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3", "reference_id": "?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://git.openssl.org/gitweb/?p=openssl.git%3Ba=commit%3Bh=96db9023b881d7cd9f379b0c154650d6c108e9a3" }, { "reference_url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E", "reference_id": "re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "http://www.kerio.com/support/kerio-control/release-history", "reference_id": "release-history", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.kerio.com/support/kerio-control/release-history" }, { "reference_url": "http://cogentdatahub.com/ReleaseNotes.html", "reference_id": "ReleaseNotes.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://cogentdatahub.com/ReleaseNotes.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0376", "reference_id": "RHSA-2014:0376", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0376" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html", "reference_id": "RHSA-2014-0376.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0376.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0377", "reference_id": "RHSA-2014:0377", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0377" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html", "reference_id": "RHSA-2014-0377.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0377.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0378", "reference_id": "RHSA-2014:0378", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0378" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html", "reference_id": "RHSA-2014-0378.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0378.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0396", "reference_id": "RHSA-2014:0396", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0396" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html", "reference_id": "RHSA-2014-0396.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0396.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd", "reference_id": "ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://yunus-shn.medium.com/ricon-industrial-cellular-router-heartbleed-attack-2634221c02bd" }, { "reference_url": "http://www.openssl.org/news/secadv_20140407.txt", "reference_id": "secadv_20140407.txt", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.openssl.org/news/secadv_20140407.txt" }, { "reference_url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf", "reference_id": "SJHN-7RKGNM_R4_EN.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.apcmedia.com/salestools/SJHN-7RKGNM/SJHN-7RKGNM_R4_EN.pdf" }, { "reference_url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html", "reference_id": "sol15159.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html" }, { "reference_url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217", "reference_id": "sol15159.html?sr=36517217", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://support.f5.com/kb/en-us/solutions/public/15000/100/sol15159.html?sr=36517217" }, { "reference_url": "http://www.splunk.com/view/SP-CAAAMB3", "reference_id": "SP-CAAAMB3", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.splunk.com/view/SP-CAAAMB3" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf", "reference_id": "ssa-635659.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-635659.pdf" }, { "reference_url": "http://www.us-cert.gov/ncas/alerts/TA14-098A", "reference_id": "TA14-098A", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.us-cert.gov/ncas/alerts/TA14-098A" }, { "reference_url": "https://usn.ubuntu.com/2165-1/", "reference_id": "USN-2165-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2165-1/" }, { "reference_url": "http://www.ubuntu.com/usn/USN-2165-1", "reference_id": "USN-2165-1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.ubuntu.com/usn/USN-2165-1" }, { "reference_url": "https://filezilla-project.org/versions.php?type=server", "reference_id": "versions.php?type=server", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://filezilla-project.org/versions.php?type=server" }, { "reference_url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_id": "Vulnerabilities-resolved-in-TRITON-APX-Version-8-0", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRITON-APX-Version-8-0" }, { "reference_url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html", "reference_id": "vulnerability788210.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Attend", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-02-07T13:32:34Z/" } ], "url": "https://www.cert.fi/en/reports/2014/vulnerability788210.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0160" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rnz3-9s3x-9fhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97157?format=api", "vulnerability_id": "VCID-ruv6-s4td-dfbx", "summary": "Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0798.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96374", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96379", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.25961", "scoring_system": "epss", "scoring_elements": "0.96383", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311876", "reference_id": "1311876", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1311876" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0798" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ruv6-s4td-dfbx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97075?format=api", "vulnerability_id": "VCID-ry6z-pa5t-9bhh", "summary": "OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0050.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0050", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03261", "scoring_system": "epss", "scoring_elements": "0.87382", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03261", "scoring_system": "epss", "scoring_elements": "0.87404", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03261", "scoring_system": "epss", "scoring_elements": "0.87402", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03261", "scoring_system": "epss", "scoring_elements": "0.87399", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0050" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0050" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=782795", "reference_id": "782795", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=782795" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-0050" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ry6z-pa5t-9bhh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97087?format=api", "vulnerability_id": "VCID-tdn2-q5yk-zuh1", "summary": "The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6450.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.9554", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95548", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95551", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.19665", "scoring_system": "epss", "scoring_elements": "0.95553", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6450" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6449" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6450" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1047840", "reference_id": "1047840", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1047840" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-6450" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tdn2-q5yk-zuh1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97106?format=api", "vulnerability_id": "VCID-tuv3-bf9n-5kfg", "summary": "Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3567.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96428", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96432", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96436", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.26544", "scoring_system": "epss", "scoring_elements": "0.96437", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3513" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3567" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152961", "reference_id": "1152961", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1152961" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1652", "reference_id": "RHSA-2014:1652", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1652" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1692", "reference_id": "RHSA-2014:1692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0126", "reference_id": "RHSA-2015:0126", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0126" }, { "reference_url": "https://usn.ubuntu.com/2385-1/", "reference_id": "USN-2385-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2385-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3567" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tuv3-bf9n-5kfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97127?format=api", "vulnerability_id": "VCID-tw5c-d87m-syfy", "summary": "The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0286.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95762", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95767", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95771", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.21097", "scoring_system": "epss", "scoring_elements": "0.95772", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202366", "reference_id": "1202366", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202366" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0286" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tw5c-d87m-syfy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97073?format=api", "vulnerability_id": "VCID-tzaw-kbt8-6kb7", "summary": "The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0027.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0027", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00697", "scoring_system": "epss", "scoring_elements": "0.72313", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00697", "scoring_system": "epss", "scoring_elements": "0.72355", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00697", "scoring_system": "epss", "scoring_elements": "0.7236", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00697", "scoring_system": "epss", "scoring_elements": "0.72341", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0027" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0027" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771782", "reference_id": "771782", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771782" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-0027" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tzaw-kbt8-6kb7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/54075?format=api", "vulnerability_id": "VCID-ugat-frbm-9bae", "summary": "Inadequate Encryption Strength\nOpenSSL supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. In order to be vulnerable a server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) The underlying error is in the implementation of the `RSA_padding_check_SSLv23()` function. This also affects the `RSA_SSLV23_PADDING` padding mode used by various other functions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23839.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-23839.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23839", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52841", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52888", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52901", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52907", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-23839" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23839", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-23839" }, { "reference_url": "https://www.openssl.org/news/secadv/20210216.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T19:19:45Z/" } ], "url": "https://www.openssl.org/news/secadv/20210216.txt" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930294", "reference_id": "1930294", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930294" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23839", "reference_id": "CVE-2021-23839", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23839" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20210219-0009/", "reference_id": "ntap-20210219-0009", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T19:19:45Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20210219-0009/" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "reference_id": "ntap-20240621-0006", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T19:19:45Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "reference_url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547", "reference_id": "?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-01T19:19:45Z/" } ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2021-23839" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ugat-frbm-9bae" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97108?format=api", "vulnerability_id": "VCID-um7w-rbrc-vfaz", "summary": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3569.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91974", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91986", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91988", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.07556", "scoring_system": "epss", "scoring_elements": "0.91985", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:M/C:N/I:N/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177249", "reference_id": "1177249", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1177249" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3569" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-um7w-rbrc-vfaz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/61370?format=api", "vulnerability_id": "VCID-umbv-yqxu-cubb", "summary": "The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0169.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0169", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00943", "scoring_system": "epss", "scoring_elements": "0.76636", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00943", "scoring_system": "epss", "scoring_elements": "0.76666", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00943", "scoring_system": "epss", "scoring_elements": "0.76672", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00943", "scoring_system": "epss", "scoring_elements": "0.76661", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-0169" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699885", "reference_id": "699885", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699885" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699888", "reference_id": "699888", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699888" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889", "reference_id": "699889", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699889" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=907589", "reference_id": "907589", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907589" }, { "reference_url": "https://security.gentoo.org/glsa/201310-10", "reference_id": "GLSA-201310-10", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201310-10" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://security.gentoo.org/glsa/201401-30", "reference_id": "GLSA-201401-30", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201401-30" }, { "reference_url": "https://security.gentoo.org/glsa/201406-32", "reference_id": "GLSA-201406-32", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201406-32" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0273", "reference_id": "RHSA-2013:0273", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0273" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0274", "reference_id": "RHSA-2013:0274", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0274" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0275", "reference_id": "RHSA-2013:0275", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0275" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0531", "reference_id": "RHSA-2013:0531", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0531" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0532", "reference_id": "RHSA-2013:0532", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0532" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0587", "reference_id": "RHSA-2013:0587", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0587" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0636", "reference_id": "RHSA-2013:0636", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0636" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0782", "reference_id": "RHSA-2013:0782", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0782" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0783", "reference_id": "RHSA-2013:0783", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0783" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0822", "reference_id": "RHSA-2013:0822", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0822" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0823", "reference_id": "RHSA-2013:0823", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0823" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0833", "reference_id": "RHSA-2013:0833", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0833" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0855", "reference_id": "RHSA-2013:0855", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0855" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1013", "reference_id": "RHSA-2013:1013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1013" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1455", "reference_id": "RHSA-2013:1455", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1455" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1456", "reference_id": "RHSA-2013:1456", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1456" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:4298", "reference_id": "RHSA-2020:4298", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:4298" }, { "reference_url": "https://usn.ubuntu.com/1732-1/", "reference_id": "USN-1732-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1732-1/" }, { "reference_url": "https://usn.ubuntu.com/1732-3/", "reference_id": "USN-1732-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1732-3/" }, { "reference_url": "https://usn.ubuntu.com/1735-1/", "reference_id": "USN-1735-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1735-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2013-0169" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-umbv-yqxu-cubb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97117?format=api", "vulnerability_id": "VCID-uryx-vzmr-83g4", "summary": "The ssl3_get_cert_verify function in s3_srvr.c in OpenSSL 1.0.0 before 1.0.0p and 1.0.1 before 1.0.1k accepts client authentication with a Diffie-Hellman (DH) certificate without requiring a CertificateVerify message, which allows remote attackers to obtain access without knowledge of a private key via crafted TLS Handshake Protocol traffic to a server that recognizes a Certification Authority with DH support.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0205.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93983", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93991", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.12252", "scoring_system": "epss", "scoring_elements": "0.93992", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3569" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3570" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3571" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3572" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8275" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0204" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0205" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0206" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180239", "reference_id": "1180239", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1180239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0066", "reference_id": "RHSA-2015:0066", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0066" }, { "reference_url": "https://usn.ubuntu.com/2459-1/", "reference_id": "USN-2459-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2459-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0205" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uryx-vzmr-83g4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97099?format=api", "vulnerability_id": "VCID-ustf-8ujc-y3dd", "summary": "The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of '\\0' characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3508.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87089", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87112", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87109", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03123", "scoring_system": "epss", "scoring_elements": "0.87104", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127490", "reference_id": "1127490", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127490" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3508" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ustf-8ujc-y3dd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97061?format=api", "vulnerability_id": "VCID-vbtc-cy97-jkhb", "summary": "The elliptic curve cryptography (ECC) subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm (ECDSA) is used for the ECDHE_ECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine private keys via a timing attack and a lattice calculation.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1945.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1945", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.04848", "scoring_system": "epss", "scoring_elements": "0.89721", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.04848", "scoring_system": "epss", "scoring_elements": "0.89738", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.04848", "scoring_system": "epss", "scoring_elements": "0.8974", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.04848", "scoring_system": "epss", "scoring_elements": "0.89739", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-1945" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1945", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1945" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=709021", "reference_id": "709021", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=709021" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-1945" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vbtc-cy97-jkhb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97059?format=api", "vulnerability_id": "VCID-vg5j-kxp6-3qd4", "summary": "Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-5298.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95459", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95466", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95469", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.19072", "scoring_system": "epss", "scoring_elements": "0.95471", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5298" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0076" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087195", "reference_id": "1087195", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1087195" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2192-1/", "reference_id": "USN-2192-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2192-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2010-5298" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vg5j-kxp6-3qd4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97129?format=api", "vulnerability_id": "VCID-w7uh-sfv6-1ua1", "summary": "The X509_to_X509_REQ function in crypto/x509/x509_req.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow attackers to cause a denial of service (NULL pointer dereference and application crash) via an invalid certificate key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0288.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88557", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88575", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88577", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03949", "scoring_system": "epss", "scoring_elements": "0.88576", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0209" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0286" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0287" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0288" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0289" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0292" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202418", "reference_id": "1202418", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1202418" }, { "reference_url": "https://security.gentoo.org/glsa/201503-11", "reference_id": "GLSA-201503-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201503-11" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0715", "reference_id": "RHSA-2015:0715", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0715" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0716", "reference_id": "RHSA-2015:0716", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0716" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0752", "reference_id": "RHSA-2015:0752", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0752" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0800", "reference_id": "RHSA-2015:0800", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0800" }, { "reference_url": "https://usn.ubuntu.com/2537-1/", "reference_id": "USN-2537-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2537-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2015-0288" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-w7uh-sfv6-1ua1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97085?format=api", "vulnerability_id": "VCID-x6t8-ay52-ykfr", "summary": "The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4353.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4353", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95946", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95951", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.22496", "scoring_system": "epss", "scoring_elements": "0.95954", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4353" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049058", "reference_id": "1049058", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1049058" }, { "reference_url": "https://security.gentoo.org/glsa/201402-25", "reference_id": "GLSA-201402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201402-25" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0015", "reference_id": "RHSA-2014:0015", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0015" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0041", "reference_id": "RHSA-2014:0041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0041" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0416", "reference_id": "RHSA-2014:0416", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0416" }, { "reference_url": "https://usn.ubuntu.com/2079-1/", "reference_id": "USN-2079-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2079-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2013-4353" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x6t8-ay52-ykfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97060?format=api", "vulnerability_id": "VCID-x8rn-pa6c-kyeb", "summary": "ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka \"OCSP stapling vulnerability.\"", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0014.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-0014", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01196", "scoring_system": "epss", "scoring_elements": "0.79214", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01196", "scoring_system": "epss", "scoring_elements": "0.79241", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01196", "scoring_system": "epss", "scoring_elements": "0.79246", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01196", "scoring_system": "epss", "scoring_elements": "0.79238", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-0014" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=676063", "reference_id": "676063", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=676063" }, { "reference_url": "https://security.gentoo.org/glsa/201110-01", "reference_id": "GLSA-201110-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201110-01" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:0677", "reference_id": "RHSA-2011:0677", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:0677" }, { "reference_url": "https://usn.ubuntu.com/1064-1/", "reference_id": "USN-1064-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1064-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-0014" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x8rn-pa6c-kyeb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97152?format=api", "vulnerability_id": "VCID-xhgb-kse1-r3ea", "summary": "The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the same Intel Sandy Bridge CPU core as a victim and leveraging cache-bank conflicts, aka a \"CacheBleed\" attack.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0702.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68133", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68173", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68182", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00545", "scoring_system": "epss", "scoring_elements": "0.68174", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0702" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0705" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0797" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0799" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2842" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310599", "reference_id": "1310599", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1310599" }, { "reference_url": "https://security.gentoo.org/glsa/201603-15", "reference_id": "GLSA-201603-15", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201603-15" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0301", "reference_id": "RHSA-2016:0301", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0301" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:0379", "reference_id": "RHSA-2016:0379", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:0379" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2016:2957", "reference_id": "RHSA-2016:2957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2016:2957" }, { "reference_url": "https://usn.ubuntu.com/2914-1/", "reference_id": "USN-2914-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2914-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4379?format=api", "purl": "pkg:deb/debian/openssl@1.0.1t-1%2Bdeb8u8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1t-1%252Bdeb8u8" }, { "url": "http://public2.vulnerablecode.io/api/packages/5333?format=api", "purl": "pkg:deb/debian/openssl@1.0.2l-1~bpo8%2B1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-zhax-1919-2ygm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.2l-1~bpo8%252B1" } ], "aliases": [ "CVE-2016-0702" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xhgb-kse1-r3ea" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97091?format=api", "vulnerability_id": "VCID-xmgs-gryg-6fh2", "summary": "The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0198.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0198", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96985", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96989", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96992", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.32978", "scoring_system": "epss", "scoring_elements": "0.96993", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0198" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0198" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093837", "reference_id": "1093837", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1093837" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747432", "reference_id": "747432", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747432" }, { "reference_url": "https://security.gentoo.org/glsa/201407-05", "reference_id": "GLSA-201407-05", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201407-05" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0625", "reference_id": "RHSA-2014:0625", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0625" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0628", "reference_id": "RHSA-2014:0628", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0628" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0679", "reference_id": "RHSA-2014:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0679" }, { "reference_url": "https://usn.ubuntu.com/2192-1/", "reference_id": "USN-2192-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2192-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-0198" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xmgs-gryg-6fh2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97070?format=api", "vulnerability_id": "VCID-xtas-hrhn-z7d6", "summary": "OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4577.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4577", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02787", "scoring_system": "epss", "scoring_elements": "0.86352", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02787", "scoring_system": "epss", "scoring_elements": "0.86375", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02787", "scoring_system": "epss", "scoring_elements": "0.86376", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02787", "scoring_system": "epss", "scoring_elements": "0.86373", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4577" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4577" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771778", "reference_id": "771778", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771778" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0059", "reference_id": "RHSA-2012:0059", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0059" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0109", "reference_id": "RHSA-2012:0109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0109" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-4577" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xtas-hrhn-z7d6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97101?format=api", "vulnerability_id": "VCID-xzyr-6dak-hqes", "summary": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3510.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94629", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94638", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.14798", "scoring_system": "epss", "scoring_elements": "0.94639", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3505" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3506" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3507" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3508" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3509" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3510" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3511" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3512" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5139" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127503", "reference_id": "1127503", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1127503" }, { "reference_url": "https://security.gentoo.org/glsa/201412-39", "reference_id": "GLSA-201412-39", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-39" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1052", "reference_id": "RHSA-2014:1052", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1052" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1053", "reference_id": "RHSA-2014:1053", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1053" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1054", "reference_id": "RHSA-2014:1054", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1054" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1256", "reference_id": "RHSA-2014:1256", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1256" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1297", "reference_id": "RHSA-2014:1297", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1297" }, { "reference_url": "https://usn.ubuntu.com/2308-1/", "reference_id": "USN-2308-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/2308-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }, { "url": "http://public2.vulnerablecode.io/api/packages/4378?format=api", "purl": "pkg:deb/debian/openssl@1.0.1k-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1k-3" } ], "aliases": [ "CVE-2014-3510" ], "risk_score": 0.1, "exploitability": "0.5", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xzyr-6dak-hqes" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97079?format=api", "vulnerability_id": "VCID-yrx3-uj3k-23ct", "summary": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2110.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2110", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.08744", "scoring_system": "epss", "scoring_elements": "0.9265", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.08744", "scoring_system": "epss", "scoring_elements": "0.92662", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.08744", "scoring_system": "epss", "scoring_elements": "0.92659", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.08744", "scoring_system": "epss", "scoring_elements": "0.92654", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2110" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2110" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=814185", "reference_id": "814185", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=814185" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/18756.txt", "reference_id": "CVE-2012-2131;OSVDB-81223;CVE-2012-2110", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/18756.txt" }, { "reference_url": "https://security.gentoo.org/glsa/201312-03", "reference_id": "GLSA-201312-03", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201312-03" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0518", "reference_id": "RHSA-2012:0518", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0518" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0522", "reference_id": "RHSA-2012:0522", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0522" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1424-1/", "reference_id": "USN-1424-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1424-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2012-2110" ], "risk_score": 0.2, "exploitability": "2.0", "weighted_severity": "0.1", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yrx3-uj3k-23ct" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/97069?format=api", "vulnerability_id": "VCID-ysgs-pm77-4yah", "summary": "The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4576.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01046", "scoring_system": "epss", "scoring_elements": "0.77841", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01046", "scoring_system": "epss", "scoring_elements": "0.77868", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01046", "scoring_system": "epss", "scoring_elements": "0.77874", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01046", "scoring_system": "epss", "scoring_elements": "0.77864", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4576" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=771775", "reference_id": "771775", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=771775" }, { "reference_url": "https://security.gentoo.org/glsa/201203-12", "reference_id": "GLSA-201203-12", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201203-12" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0059", "reference_id": "RHSA-2012:0059", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0059" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0060", "reference_id": "RHSA-2012:0060", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0060" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0086", "reference_id": "RHSA-2012:0086", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0086" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0109", "reference_id": "RHSA-2012:0109", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0109" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1306", "reference_id": "RHSA-2012:1306", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1306" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1307", "reference_id": "RHSA-2012:1307", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1307" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1308", "reference_id": "RHSA-2012:1308", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1308" }, { "reference_url": "https://usn.ubuntu.com/1357-1/", "reference_id": "USN-1357-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1357-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/4074?format=api", "purl": "pkg:deb/debian/openssl@1.0.1e-2%2Bdeb7u20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14yd-vsj7-e3bv" }, { "vulnerability": "VCID-1hgm-58xg-r7bt" }, { "vulnerability": "VCID-1vv2-224u-8ff5" }, { "vulnerability": "VCID-249a-9kqa-p7an" }, { "vulnerability": "VCID-2gwr-hz4v-3ua5" }, { "vulnerability": "VCID-2qj9-rneb-tug9" }, { "vulnerability": "VCID-2x2e-84kd-9qh5" }, { "vulnerability": "VCID-3ays-4s4x-m3hu" }, { "vulnerability": "VCID-3g6n-ujyv-jub3" }, { "vulnerability": "VCID-3pke-7yer-87hz" }, { "vulnerability": "VCID-4197-62g5-8ka3" }, { "vulnerability": "VCID-41jv-azph-dyat" }, { "vulnerability": "VCID-448b-h78v-wfes" }, { "vulnerability": "VCID-4pe4-89ss-57am" }, { "vulnerability": "VCID-4wy2-zsz2-a3ew" }, { "vulnerability": "VCID-59pf-e59c-ayfd" }, { "vulnerability": "VCID-5a2a-trbk-fkfg" }, { "vulnerability": "VCID-5hck-s1fh-k3gf" }, { "vulnerability": "VCID-5rhg-tvzd-h7es" }, { "vulnerability": "VCID-5uat-sz2c-r3gb" }, { "vulnerability": "VCID-6ckn-3rv4-abhh" }, { "vulnerability": "VCID-6csp-ek5k-efet" }, { "vulnerability": "VCID-6xfg-3n5d-pbcv" }, { "vulnerability": "VCID-76r1-sn8n-97cp" }, { "vulnerability": "VCID-77sy-m4qw-dubh" }, { "vulnerability": "VCID-77vh-npap-5fam" }, { "vulnerability": "VCID-7a92-nbqm-2fgb" }, { "vulnerability": "VCID-7abj-3zsb-bfep" }, { "vulnerability": "VCID-7fhc-ke81-p3cn" }, { "vulnerability": "VCID-7gkv-pu79-43hx" }, { "vulnerability": "VCID-7qvb-vmm3-eud8" }, { "vulnerability": "VCID-7wh9-yyhq-17bd" }, { "vulnerability": "VCID-81zk-xrsj-cufe" }, { "vulnerability": "VCID-842m-3fr7-g7a6" }, { "vulnerability": "VCID-895j-d4aq-2qb7" }, { "vulnerability": "VCID-8fae-zjwu-47gz" }, { "vulnerability": "VCID-8j5t-nvjh-7kez" }, { "vulnerability": "VCID-8q7w-7je3-zkgt" }, { "vulnerability": "VCID-97kv-2j1c-yuc2" }, { "vulnerability": "VCID-99tx-2t22-6khg" }, { "vulnerability": "VCID-as38-bfar-q3hh" }, { "vulnerability": "VCID-asbv-yhcz-9qdr" }, { "vulnerability": "VCID-baum-2mwk-p7gt" }, { "vulnerability": "VCID-bbu1-667d-vqcb" }, { "vulnerability": "VCID-bd3y-xkqp-w7ey" }, { "vulnerability": "VCID-bkgn-85j5-tbcd" }, { "vulnerability": "VCID-bpm2-rvhc-pfaz" }, { "vulnerability": "VCID-bpm9-v7t1-j3d9" }, { "vulnerability": "VCID-bsb3-4ph2-1bhg" }, { "vulnerability": "VCID-btfw-3r9y-7kad" }, { "vulnerability": "VCID-c1mk-2p5p-fqc5" }, { "vulnerability": "VCID-c28z-zhhx-9ugr" }, { "vulnerability": "VCID-c45f-5ecq-t3a4" }, { "vulnerability": "VCID-chgs-b5zr-2uey" }, { "vulnerability": "VCID-d1w5-8ktx-cubx" }, { "vulnerability": "VCID-d6qb-nwa5-k7ap" }, { "vulnerability": "VCID-d8gm-d7ng-1bam" }, { "vulnerability": "VCID-d9rt-g2k8-pbey" }, { "vulnerability": "VCID-dspw-qctj-jufk" }, { "vulnerability": "VCID-dvr1-aacj-67b3" }, { "vulnerability": "VCID-e5ah-km4p-pbcx" }, { "vulnerability": "VCID-e6jy-vxau-jfba" }, { "vulnerability": "VCID-e8wv-nh7t-g3ey" }, { "vulnerability": "VCID-e92e-benv-bffs" }, { "vulnerability": "VCID-erdm-7pfg-e7hc" }, { "vulnerability": "VCID-ev86-zmde-sfep" }, { "vulnerability": "VCID-ewrx-kqzu-vkcj" }, { "vulnerability": "VCID-fb66-4fr3-xye7" }, { "vulnerability": "VCID-fgmh-6g91-9qgv" }, { "vulnerability": "VCID-fk7c-tmcz-n7gj" }, { "vulnerability": "VCID-fv1c-cve4-kkgf" }, { "vulnerability": "VCID-g1bm-2aj1-kff9" }, { "vulnerability": "VCID-ga7r-j1sv-2qh6" }, { "vulnerability": "VCID-gj2m-z5b6-6yf2" }, { "vulnerability": "VCID-h92z-6ze3-m3cy" }, { "vulnerability": "VCID-htwq-dece-p3e2" }, { "vulnerability": "VCID-huj5-2wbw-m7dm" }, { "vulnerability": "VCID-hvx5-c491-sba7" }, { "vulnerability": "VCID-hyyj-mu1w-buf4" }, { "vulnerability": "VCID-hz7k-w38p-mbbg" }, { "vulnerability": "VCID-jfcp-evg4-8qd4" }, { "vulnerability": "VCID-jkx1-qxrh-4feh" }, { "vulnerability": "VCID-jrts-kcz9-hbcf" }, { "vulnerability": "VCID-ju5y-bakm-mqd8" }, { "vulnerability": "VCID-jwuq-ek5h-p7eh" }, { "vulnerability": "VCID-k1h8-rvw8-qkby" }, { "vulnerability": "VCID-k4k5-uhxu-gyc1" }, { "vulnerability": "VCID-k8cj-882g-sfac" }, { "vulnerability": "VCID-k9fk-ygea-9bf1" }, { "vulnerability": "VCID-ke5z-ndd2-duhm" }, { "vulnerability": "VCID-kpyv-ydcz-1qev" }, { "vulnerability": "VCID-m4ms-vh59-ufbd" }, { "vulnerability": "VCID-m4u4-7g9x-qbh5" }, { "vulnerability": "VCID-megu-ghcn-83ez" }, { "vulnerability": "VCID-mnkq-e45g-fyfw" }, { "vulnerability": "VCID-mnsf-z11p-7qhk" }, { "vulnerability": "VCID-n1r2-zqmn-2ufh" }, { "vulnerability": "VCID-n5d8-zmzf-eube" }, { "vulnerability": "VCID-n74y-fd83-ybem" }, { "vulnerability": "VCID-nasm-fjhp-9beh" }, { "vulnerability": "VCID-nbqq-cyvt-y7hj" }, { "vulnerability": "VCID-nf4z-1rdg-5kbu" }, { "vulnerability": "VCID-nqu1-ffyz-wubt" }, { "vulnerability": "VCID-nyxa-6hvt-3udy" }, { "vulnerability": "VCID-p43p-ps85-vfd1" }, { "vulnerability": "VCID-pms8-rgdk-xbcn" }, { "vulnerability": "VCID-ppb8-ewtj-pqat" }, { "vulnerability": "VCID-qpwm-n2zh-rffm" }, { "vulnerability": "VCID-qxy5-81tu-cuh4" }, { "vulnerability": "VCID-r9en-es5m-t3gs" }, { "vulnerability": "VCID-rd79-vcxq-uuex" }, { "vulnerability": "VCID-rhc6-smuj-uyfk" }, { "vulnerability": "VCID-rnz3-9s3x-9fhg" }, { "vulnerability": "VCID-ruv6-s4td-dfbx" }, { "vulnerability": "VCID-rynq-d6tu-2ygg" }, { "vulnerability": "VCID-s9by-79q1-27d9" }, { "vulnerability": "VCID-smvv-rrba-qqa5" }, { "vulnerability": "VCID-sq4p-ecxr-2qc8" }, { "vulnerability": "VCID-taas-512g-jfdw" }, { "vulnerability": "VCID-tdn2-q5yk-zuh1" }, { "vulnerability": "VCID-tkap-7nn3-uqae" }, { "vulnerability": "VCID-ts7c-u8g2-rqa4" }, { "vulnerability": "VCID-tuv3-bf9n-5kfg" }, { "vulnerability": "VCID-tw5c-d87m-syfy" }, { "vulnerability": "VCID-u1mq-dx66-9yer" }, { "vulnerability": "VCID-um7w-rbrc-vfaz" }, { "vulnerability": "VCID-uryx-vzmr-83g4" }, { "vulnerability": "VCID-ustf-8ujc-y3dd" }, { "vulnerability": "VCID-uw52-vah8-uqda" }, { "vulnerability": "VCID-v4en-se25-u7fu" }, { "vulnerability": "VCID-v6un-s51d-z3hq" }, { "vulnerability": "VCID-vg5j-kxp6-3qd4" }, { "vulnerability": "VCID-vkad-cc3g-akc7" }, { "vulnerability": "VCID-w1qj-n768-hbar" }, { "vulnerability": "VCID-w7uh-sfv6-1ua1" }, { "vulnerability": "VCID-wmmk-t96u-e3cu" }, { "vulnerability": "VCID-x5bw-wd4j-13e4" }, { "vulnerability": "VCID-x6t8-ay52-ykfr" }, { "vulnerability": "VCID-xhgb-kse1-r3ea" }, { "vulnerability": "VCID-xmgs-gryg-6fh2" }, { "vulnerability": "VCID-xpn8-u26e-77ge" }, { "vulnerability": "VCID-xzyr-6dak-hqes" }, { "vulnerability": "VCID-zhax-1919-2ygm" }, { "vulnerability": "VCID-zmk4-zgkk-7kdh" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" } ], "aliases": [ "CVE-2011-4576" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ysgs-pm77-4yah" } ], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssl@1.0.1e-2%252Bdeb7u20" }