Vulnerability Database · Alpine · openssl · Version

openssl 3.3.2-r2

3.3.2-r2 is affected by 36 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 1 High 14 Medium 5 Low 2 Unrated 14

Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

openssl 3.3.2-r2 vulnerabilities

36 vulnerabilities cover openssl 3.3.2-r2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Use-After-Free Vulnerability in OpenSSL Package 9.8 critical 3.5.7-r0 09 Jun 2026
Heap Buffer Overflow in OpenSSL: CVE-2026-7383 Vulnerability 8.1 high 3.5.7-r0 09 Jun 2026
OpenSSL CMP Password Protection Vulnerability - Denial of Service Risk 7.5 high 3.5.8-r0 25 Aug 2026
Memory Exhaustion Vulnerability in OpenSSL QUIC Stack 7.5 high 3.5.8-r0 25 Aug 2026
OpenSSL Vulnerability: Out-of-Bounds Heap Write in CMS Decryption 7.5 high 3.5.8-r0 25 Aug 2026
Memory Amplification Vulnerability in OpenSSL DTLS - CVE-2026-54874 7.5 high 3.5.8-r0 25 Aug 2026
Double Free Vulnerability in OpenSSL Package Leading to Denial of Service 7.5 high 3.5.8-r0 25 Aug 2026
Denial of Service Vulnerability in OpenSSL Package due to NULL Pointer Dereference 7.5 high 3.5.8-r0 25 Aug 2026
Denial of Service Vulnerability in OpenSSL QUIC Server - CVE-2026-14456 7.5 high 3.5.8-r0 13 Aug 2026
Heap Buffer Over-read Vulnerability in OpenSSL - CVE-2026-9076 7.5 high 3.5.7-r0 09 Jun 2026
Critical AES-OCB Vulnerability in OpenSSL Package Leading to Key Reuse and Loss of Confidentiality 7.5 high 3.5.7-r0 09 Jun 2026
OpenSSL QUIC Server NULL Pointer Dereference Vulnerability 7.5 high 3.5.7-r0 09 Jun 2026
Heap Buffer Over-read Vulnerability in OpenSSL: CVE-2026-34180 7.5 high 3.5.7-r0 09 Jun 2026
Sensitive Data Leakage in OpenSSL due to RSASVE Key Encapsulation Failure 7.5 high 3.5.6-r0 07 Apr 2026
OpenSSL TLS 1.3 Key Exchange Group Negotiation Vulnerability in OpenSSL Package 7.5 high 3.5.6-r0 13 Mar 2026
Unbounded Memory Growth in OpenSSL due to CMP Extra Certificates Caching 5.9 medium 3.5.8-r0 25 Aug 2026
OpenSSL CMP Client NULL Pointer Dereference Vulnerability 5.9 medium 3.5.7-r0 09 Jun 2026
OpenSSL NULL Pointer Dereference Vulnerability - Denial of Service Risk 5.9 medium 3.5.7-r0 09 Jun 2026
Critical Certificate Validation Flaw in OpenSSL Packages Leading to Root CA Escalation 5.3 medium 3.5.7-r0 09 Jun 2026
Critical Vulnerability in OpenSSL: AES-SIV and AES-GCM-SIV Authentication Bypass 4.8 medium 3.5.7-r0 09 Jun 2026
Bleichenbacher-Style Attack Vulnerability in OpenSSL Package 3.7 low 3.5.7-r0 09 Jun 2026
Critical Subgroup Membership Check Flaw in OpenSSL - CVE-2026-42770 3.7 low 3.5.7-r0 09 Jun 2026
Critical Vulnerability in OpenSSL: AEAD Tag Verification Bypass N/A unrated 3.5.8-r0 25 Aug 2026
OpenSSL CMP Response Validation Vulnerability - Denial of Service Risk N/A unrated 3.5.8-r0 25 Aug 2026
Memory Exhaustion Vulnerability in OpenSSL QUIC Implementation N/A unrated 3.5.7-r0 09 Jun 2026
Critical Input Validation Flaw in OpenSSL CMS Processing N/A unrated 3.5.7-r0 09 Jun 2026
PKCS#12 File Processing Vulnerability in OpenSSL: Certificate and Private Key Forgery Risk N/A unrated 3.5.7-r0 09 Jun 2026
Heap Buffer Overflow in OpenSSL due to Large OCTET STRING Conversion N/A unrated 3.5.6-r0 07 Apr 2026
Critical NULL Pointer Dereference in OpenSSL Package Leading to Denial of Service N/A unrated 3.5.6-r0 07 Apr 2026
Denial of Service Vulnerability in OpenSSL Package due to NULL Pointer Dereference N/A unrated 3.5.6-r0 07 Apr 2026
Denial of Service Vulnerability in OpenSSL Package Due to NULL Pointer Dereference N/A unrated 3.5.6-r0 07 Apr 2026
Use-After-Free Vulnerability in OpenSSL Package: CVE-2026-28387 N/A unrated 3.5.6-r0 07 Apr 2026
OpenSSL Command-Line Tool Input Truncation Vulnerability - CVE-2025-15469 N/A unrated 3.5.5-r0 27 Jan 2026
Buffer Overflow Vulnerability in OpenSSL Package: CVE-2025-11187 N/A unrated 3.5.5-r0 27 Jan 2026
OpenSSL Vulnerability: Misconfiguration of Trusted Certificate Uses N/A unrated 3.5.1-r0 22 May 2025
OpenSSL Vulnerability CVE-2025-4575: Misconfiguration of Trusted Certificate Uses N/A unrated 3.5.1-r0 22 May 2025

Looking for another version, or everything Vulert holds for openssl?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About openssl 3.3.2-r2

Is openssl 3.3.2-r2 vulnerable?

Yes. 36 vulnerabilities in the Vulert database cover openssl 3.3.2-r2: 1 critical, 14 high, 5 medium and 2 low, plus 14 not yet rated. Each entry above names the fixed version to move to.

How do I monitor openssl for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the openssl version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.