CVE-2021-23840

🗓️ 16 Feb 2021 16:55:18Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 784 Views

CVE-2021-23840: EVP_CipherUpdate Overflow Issue in OpenSS

Reporter	Title	Published	Views	Family All 526
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	29 Jun 202115:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in node.js may affect configuration editor used in IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-1971, CVE-2020-8265, CVE-2020-8287	25 Mar 202110:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2021-23839, CVE-2021-23840, CVE-2021-23841	7 Jul 202315:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to multiple denial of service through the Node.js runtime	30 Apr 202113:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to a DoS	16 Aug 202115:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.	27 Jul 202121:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Master Data Management Server vulnerability in OpenSSL	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect Cloud Pak System (CVE-2021-23840, CVE-2021-23841)	4 Jul 202302:14	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2y

openssl opensslRange1.1.1–1.1.1j

Node

debian debian_linuxMatch10.0

Node

tenable log_correlation_engineRange<6.0.8

tenable nessus_network_monitorMatch5.11.0

tenable nessus_network_monitorMatch5.11.1

tenable nessus_network_monitorMatch5.12.0

tenable nessus_network_monitorMatch5.12.1

tenable nessus_network_monitorMatch5.13.0

Node

oracle business_intelligenceMatch5.5.0.0.0enterprise

oracle business_intelligenceMatch5.9.0.0.0enterprise

oracle business_intelligenceMatch12.2.1.3.0enterprise

oracle business_intelligenceMatch12.2.1.4.0enterprise

oracle communications_cloud_native_core_policyMatch1.15.0

oracle enterprise_manager_for_storage_managementMatch13.4.0.0

oracle enterprise_manager_ops_centerMatch12.4.0.0

oracle graalvmMatch19.3.5enterprise

oracle graalvmMatch20.3.1.2enterprise

oracle graalvmMatch21.0.0.2enterprise

oracle jd_edwards_enterpriseone_toolsRange<9.2.6.0

oracle jd_edwards_world_securityMatcha9.4

oracle mysql_serverRange<5.7.33

oracle mysql_serverRange8.0.15–8.0.23

oracle nosql_databaseRange<20.3

Node

mcafee epolicy_orchestratorRange<5.10.0

mcafee epolicy_orchestratorMatch5.10.0-

mcafee epolicy_orchestratorMatch5.10.0update_1

mcafee epolicy_orchestratorMatch5.10.0update_10

mcafee epolicy_orchestratorMatch5.10.0update_2

mcafee epolicy_orchestratorMatch5.10.0update_3

mcafee epolicy_orchestratorMatch5.10.0update_4

mcafee epolicy_orchestratorMatch5.10.0update_5

mcafee epolicy_orchestratorMatch5.10.0update_6

mcafee epolicy_orchestratorMatch5.10.0update_7

mcafee epolicy_orchestratorMatch5.10.0update_8

mcafee epolicy_orchestratorMatch5.10.0update_9

Node

fujitsu m10-1_firmwareRange<xcp2410

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp2410

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp2410

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp2410

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp2410

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp2410

AND

fujitsu m12-2sMatch-

Node

fujitsu m10-1_firmwareRange<xcp3110

AND

fujitsu m10-1Match-

Node

fujitsu m10-4_firmwareRange<xcp3110

AND

fujitsu m10-4Match-

Node

fujitsu m10-4s_firmwareRange<xcp3110

AND

fujitsu m10-4sMatch-

Node

fujitsu m12-1_firmwareRange<xcp3110

AND

fujitsu m12-1Match-

Node

fujitsu m12-2_firmwareRange<xcp3110

AND

fujitsu m12-2Match-

Node

fujitsu m12-2s_firmwareRange<xcp3110

AND

fujitsu m12-2sMatch-

Node

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.24.0lts

nodejs node.jsRange12.0.0–12.12.0-

nodejs node.jsRange12.13.0–12.21.0lts

nodejs node.jsRange14.0.0–14.14.0-

nodejs node.jsRange15.0.0–15.10.0-

nodejs node.jsMatch14.15.0lts

[
  {
    "vendor": "OpenSSL",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240621-0006/
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuApr2021.html
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
git	www.git.openssl.org/gitweb/
tenable	www.tenable.com/security/tns-2021-03
oracle	www.oracle.com/security-alerts/cpuoct2021.html
kc	www.kc.mcafee.com/corporate/index
openssl	www.openssl.org/news/secadv/20210216.txt
oracle	www.oracle.com/security-alerts/cpuapr2022.html