What’s Vulnerable › Products

OpenBSD Libressl vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your OpenBSD Libressl version is affected

Latest OpenBSD Libressl vulnerabilities

• CVE-2026-118374 — LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response (CVSS 5.9)
• CVE-2026-118373 — LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() (CVSS 3.7)
• CVE-2026-118372 — LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path (CVSS 3.7)
• CVE-2026-118371 — LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line (CVSS 3.7)
• CVE-2023-35784 — (CVSS 9.8)
• CVE-2021-46880 — (CVSS 9.8)
• CVE-2022-48437 — (CVSS 5.3)
• CVE-2021-41581 — (CVSS 5.5)
• CVE-2019-25049 — (CVSS 7.1)
• CVE-2019-25048 — (CVSS 7.1)
• CVE-2015-5333 — (CVSS 7.5)
• CVE-2015-5334 — (CVSS 9.8)
• CVE-2018-12434 — (CVSS 4.7)
• CVE-2018-8970 — (CVSS 7.4)
• CVE-2017-8301 — (CVSS 5.3)
• CVE-2014-9424 — (CVSS 7.5)