BSD PortsVulnerable: version 1.1.0gnb1 is affected by 20 known vulnerabilities. See below.
wip/openssl110 1.1.0gnb1 NetBSD
Secure Socket Layer and cryptographic library
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- openssl
- Categories
- wip, security
Description
OpenSSL is an open source project that provides a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | wip/openssl110 | 1.1.0gnb1 |
| FreeBSD | security/openssl | 3.5.9,1 |
| DragonFly | security/openssl | 3.0.16,1 |
| GhostBSD | security/openssl | 3.0.22,1 |
| OPNsense | security/openssl | 3.0.21,1 |
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/openssl110 && make install cleanDependencies
No port depends on this one.
Known vulnerabilities 20
- openssl: denial-of-service (CVE-2018-0732)
- openssl: verification-bypass (CVE-2018-0733)
- openssl: timing-attack (CVE-2018-0734)
- openssl: timing-attack (CVE-2018-0735)
- openssl: timing-attack (CVE-2018-0737)
- openssl: timing-attack (CVE-2018-5407)
- openssl: security-bypass (CVE-2019-1543)
- openssl: integer-overflow (CVE-2019-1551)
- openssl: timing-attack (CVE-2020-1968)
- openssl: null-pointer-dereference (CVE-2020-1971)
- openssl: integer-overflow (CVE-2021-23840)
- openssl: denial-of-service (CVE-2021-23841)
- openssl: remote-denial-of-service (CVE-2021-3449)
- openssl: improper-certificate-validation (CVE-2021-3450)
- openssl: buffer-overflow (CVE-2021-3711)
- openssl: denial-of-service (CVE-2021-3712)
- openssl: denial-of-service (CVE-2022-0778)
- openssl: shell-command-injection (CVE-2022-1292)
- openssl: shell-command-injection (CVE-2022-2068)
- openssl: weak-encryption (CVE-2022-2097)