[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUMIGZnh1nOFDr7dBKdAof1h982nzm-vhNrcf-lVgY-s":3,"g5a-ex:redhat\u002Fopenssl@*":98,"g5a-family:redhat\u002Fopenssl":100},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":75,"seoMetadata":76,"meta":95},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"redhat","openssl",3,9,0,"2013-02-08",[14,17,19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"0.9.6-15",false,{"version":18,"cve_count":10,"kev_count":11,"has_kev":16},"0.9.6b-3",{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},"0.9.7a-2","Openssl by Redhat is a technology product with 3 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},{"version":18,"cve_count":10,"kev_count":11,"has_kev":16},{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},[27,35,42,48,52,57,61,66,71],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":34},"CVE-2009-1386","ssl\u002Fs3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.","2009-06-04",5,"v2","Medium",0.80134,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":32,"severity":40,"isKev":16,"epssScore":41},"CVE-2012-2110","The asn1_d2i_read_bio function in crypto\u002Fasn1\u002Fa_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.","2012-04-19",7.5,"High",0.48298,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":47},"CVE-2012-2333","Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted TLS packet that is not properly handled during a certain explicit IV calculation.","2012-05-14",6.8,0.28154,{"cveId":49,"description":50,"publishedDate":12,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":51},"CVE-2013-0166","OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.",0.1965,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":56},"CVE-2004-0112","The SSL\u002FTLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL\u002FTLS handshake that causes an out-of-bounds read.","2004-11-23",0.10424,{"cveId":58,"description":59,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":60},"CVE-2009-1387","The dtls1_retrieve_buffered_fragment function in ssl\u002Fd1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"",0.10254,{"cveId":62,"description":63,"publishedDate":55,"cvssScore":39,"cvssVersion":64,"severity":40,"isKev":16,"epssScore":65},"CVE-2004-0079","The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL\u002FTLS handshake that triggers a null dereference.","v3.1",0.09537,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":70},"CVE-2009-4355","Memory leak in the zlib_stateful_finish function in crypto\u002Fcomp\u002Fc_zlib.c in OpenSSL 0.9.8l and earlier and 1.0.0 Beta through Beta 4 allows remote attackers to cause a denial of service (memory consumption) via vectors that trigger incorrect calls to the CRYPTO_cleanup_all_ex_data function, as demonstrated by use of SSLv3 and PHP with the Apache HTTP Server, a related issue to CVE-2008-1678.","2010-01-14",0.08941,{"cveId":72,"description":73,"publishedDate":55,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":16,"epssScore":74},"CVE-2004-0081","OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.",0.07229,[],{"title":77,"metaDescription":78,"keywords":79,"structuredData":80},"Openssl by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Openssl by Redhat covering 3 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openssl vulnerabilities, Openssl security, Openssl CVE, Redhat Openssl, Openssl threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":81,"@type":82,"name":83,"description":78,"url":84,"manufacturer":85,"applicationCategory":89,"softwareVersion":90,"mainEntity":91},"https:\u002F\u002Fschema.org","SoftwareApplication","Openssl","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenssl",{"@type":86,"name":87,"url":88},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","3 versions tracked",{"@type":92,"name":93,"description":94,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openssl Security Vulnerabilities","Security vulnerabilities affecting Openssl by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":96,"apiVersion":97},"2026-10-28T16:20:35.129Z","3.0",{"rows":99,"total":11,"capped":16,"failed":11},[],[]]