All 6 CVE vulnerabilities found in LibreSSL, with AI-generated Chinese analysis, references, and POCs.
Vendor: LibreSSL
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-118374 | LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response CWE-770 | 5.9 | Medium | 2026-10-28 |
| CVE-2026-118373 | LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() CWE-319 | 3.7 | Low | 2026-10-28 |
| CVE-2026-118372 | LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path CWE-93 | 3.7 | Low | 2026-10-28 |
| CVE-2026-118371 | LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line CWE-93 | 3.7 | Low | 2026-10-28 |
| CVE-2015-5333 | LibreSSL 资源管理错误漏洞 | 7.5 | - | 2020-01-23 |
| CVE-2015-5334 | LibreSSL 缓冲区错误漏洞 | 9.8 | - | 2020-01-23 |
All 6 known CVE vulnerabilities affecting LibreSSL with full Chinese analysis, references, and POCs where available.