CVE-2021-4044

🗓️ 14 Dec 2021 18:40:11Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 314 Views

Internally libssl in OpenSSL mishandles negative return values from X509_verify_cert() causing unexpected behavior

Reporter	Title	Published	Views	Family All 57
FreeBSD	OpenSSL -- Certificate validation issue	14 Dec 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.	31 Aug 202200:17	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Team Concert (RTC) and IBM Engineering Workflow Management (EWM) OpenSSL vulnerability CVE-2021-4044	21 Jun 202214:53	–	ibm
AlpineLinux	CVE-2021-4044	14 Dec 202118:40	–	alpinelinux
Broadcom	CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl	8 Nov 202200:00	–	broadcom
Broadcom	CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl	8 Nov 202200:00	–	broadcom
Tenable Nessus	CentOS 9 : openssl-3.0.7-18.el9	26 Apr 202400:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Certificate validation issue (0132ca5b-5d11-11ec-8be6-d4c9ef517024)	14 Dec 202100:00	–	nessus
Tenable Nessus	OpenSSL 3.0.0 < 3.0.1 Multiple Vulnerabilities	15 Dec 202100:00	–	nessus
Tenable Nessus	Oracle Linux 9 : openssl (ELSA-2022-9968)	1 Nov 202200:00	–	nessus

NVD

Vulners

Node

openssl opensslRange<1.0.2

openssl opensslMatch1.1.0

openssl opensslMatch3.0.0

Node

netapp cloud_backupMatch-

netapp e-series_performance_analyzerMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp snapcenterMatch-

Node

netapp a250_firmwareMatch-

AND

netapp a250Match-

Node

netapp 500f_firmwareMatch-

AND

netapp 500fMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

nodejs node.jsRange17.0.0–17.3.0-

[
  {
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in OpenSSL 3.0.1 (Affected 3.0.0)"
      }
    ]
  }
]

Source	Link
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20211229-0003/
openssl	www.openssl.org/news/secadv/20211214.txt

21 Nov 2024 06:36Current

7.2High risk

Vulners AI Score7.2

CVSS 25

CVSS 3.17.5

EPSS0.3328

CWE-835