296,172
Total vulnerabilities in the database
crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.
| Software | From | Fixed in |
|---|---|---|
| openssl / openssl | 1.0.0c | 1.0.0c.x |
| openssl / openssl | 1.0.0-beta1 | 1.0.0-beta1.x |
| openssl / openssl | 1.0.0-beta2 | 1.0.0-beta2.x |
| openssl / openssl | 1.0.0-beta3 | 1.0.0-beta3.x |
| openssl / openssl | 1.0.0d | 1.0.0d.x |
| openssl / openssl | 1.0.0-beta4 | 1.0.0-beta4.x |
| openssl / openssl | 1.0.0 | 1.0.0.x |
| openssl / openssl | 1.0.0-beta5 | 1.0.0-beta5.x |
| openssl / openssl | 1.0.0a | 1.0.0a.x |
| openssl / openssl | 1.0.0b | 1.0.0b.x |