The vulnerability in the implementation of the TLS protocol by the OpenSSL library, which allows a attacker to cause a service failure

🗓️ 06 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Vulnerability in OpenSSL Transport Layer Security due to pointer arithmetic errors allows service failure via crafted Client Hello.

Reporter	Title	Published	Views	Family All 405
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL may affect IBM Workload Scheduler	8 Sep 202109:42	–	ibm
IBM Security Bulletins	Security Bulletin: Potential DoS in IBM DataPower Gateway	16 Aug 202115:12	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security has several security vulnerabilities addressed in the latest version	30 Jul 202107:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	30 Apr 202113:30	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	14 Jun 202114:05	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by OpenSSL vulnerability	22 Dec 202110:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	14 Jul 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities fixed in IBM Security Verify Bridge - Docker	22 Sep 202122:32	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL Vulnerabilities Affect IBM Sterling Connect:Express for UNIX (CVE-2021-3449, CVE-2021-3450)	17 May 202114:30	–	ibm

Vulners

Node

openssl opensslRange1.1.1–1.1.1j

tenable,nessusRange≤8.13.1

tenable,tenable.scRange5.13.0–5.17.0

fedora fedoraMatch34

freebsd freebsdRange12.2–12.2-release-p5

freebsd freebsdRange13–13.0-rc3-p1

Source	Link
openwall	www.openwall.com/lists/oss-security/2021/03/27/1
openwall	www.openwall.com/lists/oss-security/2021/03/27/2
openwall	www.openwall.com/lists/oss-security/2021/03/28/3
openwall	www.openwall.com/lists/oss-security/2021/03/28/4
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
github	www.github.com/terorie/cve-2021-3449
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3449
security	www.security.freebsd.org/advisories/FreeBSD-SA-21:07.openssl.asc

20 Oct 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 24.3

CVSS 35.9

EPSS0.62906