Where
-Infinity
0

Vendor Risk Score

See how stunnel compares to other vendors in security performance

View Risk Score →

Stunnel StunnelStunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services

Risk 34
Severity
5.4
First published (updated )

Stunnel StunnelSSRF

Risk 19
Severity
4
First published (updated )

Stunnel StunnelStunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message

Risk 40
Severity
6.5
First published (updated )

Stunnel StunnelAI_ONLY_REPORT package: stunnel-5.72-8.el10 ------ Summary: Stack-based Out-of-Bounds Read/Write in …

Risk 19
Severity
4
First published (updated )

ubuntu/stunnel4A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it i…

Risk 46
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Stunnel StunnelStunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to t…

Risk 35
Severity
5.8
First published (updated )

Stunnel Stunnelstunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL ps…

Risk 23
Severity
4.3
First published (updated )

Stunnel StunnelA flaw was found in the way stunnel, a socket wrapper which can provide SSL support to ordinary appl…

Risk 18
Severity
4
First published (updated )

Stunnel StunnelCode Injection, Buffer Overflow

Risk 49
Severity
6.6
First published (updated )

Stunnel StunnelBuffer Overflow

Risk 82
Severity
9.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Stunnel StunnelThe OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists …

Risk 47
Severity
6.8
First published (updated )

Stunnel StunnelUnspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local…

Risk 63
Severity
7.2
First published (updated )

Stunnel StunnelStunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which a…

Risk 34
Severity
4.6
First published (updated )

Stunnel StunnelRace Condition

Risk 9
Severity
1.2
First published (updated )

Stunnel StunnelOpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the …

Risk 26
Severity
5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Stunnel StunnelFormat string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, o…

Risk 52
Severity
7.5
First published (updated )

Stunnel StunnelFormat string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary command…

Risk 87
Severity
10
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203