VulertSecurity VulertSecurity

Vulnerability Database · Debian · openssl · Version

openssl 4.0.3-1

4.0.3-1 is affected by 18 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 2 Medium 1 Low 1 Unrated 14

All openssl versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

openssl 4.0.3-1 vulnerabilities

18 vulnerabilities cover openssl 4.0.3-1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
OpenSSL QUIC Stack Vulnerability: Resource Flooding via NEW_CONNECTION_ID Frames 7.5 high No fix published 29 Sep 2026
OpenSSL Out-of-Bounds Read and Write Vulnerability - CVE-2026-72897 7.5 high No fix published 29 Sep 2026
OpenSSL QUIC Stack Connection Flow Control Vulnerability - CVE-2026-75804 5.3 medium No fix published 29 Sep 2026
Timing Side-Channel Vulnerability in OpenSSL on ARM64 and RISC-V Platforms 3.7 low No fix published 29 Sep 2026
Memory Allocation Vulnerability in OpenSSL: CVE-2026-54873 N/A unrated No fix published 29 Sep 2026
OpenSSL QUIC Stream Reassembly Performance Vulnerability - CVE-2026-42772 N/A unrated No fix published 29 Sep 2026
OpenSSL QUIC Server Vulnerability: Amplification Attack Risk N/A unrated No fix published 29 Sep 2026
Critical Vulnerability in OpenSSL Affects Debian Packages N/A unrated No fix published 09 Jun 2026
Critical Vulnerability in OpenSSL Package: CVE-2026-42764 N/A unrated No fix published 09 Jun 2026
Critical Vulnerability in OpenSSL Affects Debian Packages N/A unrated No fix published 09 Jun 2026
Critical Vulnerability in OpenSSL Affects Debian Packages N/A unrated No fix published 09 Jun 2026
Critical Vulnerability in OpenSSL Affects Debian Packages N/A unrated No fix published 09 Jun 2026
Critical Vulnerability in OpenSSL Affects Debian 13 and 14 N/A unrated No fix published 30 Sep 2025
Critical Vulnerability in OpenSSL Packages for Debian: CVE-2026-2673 N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in OpenSSL Package for Debian: CVE-2025-66199 N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in OpenSSL Affects Debian Packages N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in OpenSSL Package: CVE-2025-15468 N/A unrated No fix published 30 Nov -0001
Critical Vulnerability in OpenSSL Packages for Debian: CVE-2025-11187 N/A unrated No fix published 30 Nov -0001

Looking for another version, or everything Vulert holds for openssl?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About openssl 4.0.3-1

Is openssl 4.0.3-1 vulnerable?

Yes. 18 vulnerabilities in the Vulert database cover openssl 4.0.3-1: 0 critical, 2 high, 1 medium and 1 low, plus 14 not yet rated. Each entry above names the fixed version to move to.

How do I monitor openssl for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the openssl version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.