CVE-2021-4160

🗓️ 28 Jan 2022 21:28:41Reported by opensslType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 278 Views

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure affecting OpenSSL versions

Reporter	Title	Published	Views	Family All 115
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2022-34339, CVE-2021-3712, CVE-2021-3711, CVE-2021-4160, CVE-2021-29425, CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-43138, CVE-2022-24758)	26 Mar 202502:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents	21 Sep 202220:55	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise & IBM Integration Bus (CVE-2021-4160)	12 May 202214:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management may provide weaker than expected security due to OpenSSL through a carry propogation flaw (CVE-2021-4160)	25 Oct 202414:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in OpenSSL ( CVE-2021-4160)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in multiple dependencies affect IBM MessageGateway/ MessageSight	29 Apr 202502:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Mar 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2021-4160)	2 Feb 202317:27	–	ibm

NVD

Vulners

Node

openssl opensslRange1.0.2–1.0.2zb

openssl opensslRange1.1.1–1.1.1m

openssl opensslMatch3.0.0-

openssl opensslMatch3.0.0alpha1

openssl opensslMatch3.0.0alpha10

openssl opensslMatch3.0.0alpha11

openssl opensslMatch3.0.0alpha12

openssl opensslMatch3.0.0alpha13

openssl opensslMatch3.0.0alpha14

openssl opensslMatch3.0.0alpha15

openssl opensslMatch3.0.0alpha16

openssl opensslMatch3.0.0alpha17

openssl opensslMatch3.0.0alpha2

openssl opensslMatch3.0.0alpha3

openssl opensslMatch3.0.0alpha4

openssl opensslMatch3.0.0alpha5

openssl opensslMatch3.0.0alpha6

openssl opensslMatch3.0.0alpha7

openssl opensslMatch3.0.0alpha8

openssl opensslMatch3.0.0alpha9

openssl opensslMatch3.0.0beta1

openssl opensslMatch3.0.0beta2

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

oracle health_sciences_inform_publisherMatch6.2.1.1

oracle health_sciences_inform_publisherMatch6.3.1.1

oracle jd_edwards_enterpriseone_toolsMatch9.2.6.3

oracle jd_edwards_world_securityMatcha9.4

oracle peoplesoft_enterprise_peopletoolsMatch8.58

oracle peoplesoft_enterprise_peopletoolsMatch8.59

Node

siemens sinec_insRange<1.0

siemens sinec_insMatch1.0-

siemens sinec_insMatch1.0sp1

Node

oracle enterprise_manager_ops_centerMatch12.4.0.0

[
  {
    "vendor": "OpenSSL",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "Fixed in OpenSSL 3.0.1 (Affected 3.0.0)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
git	www.git.openssl.org/gitweb/
security	www.security.gentoo.org/glsa/202210-02
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20240621-0006/
git	www.git.openssl.org/gitweb/
oracle	www.oracle.com/security-alerts/cpujul2022.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
openssl	www.openssl.org/news/secadv/20220128.txt
debian	www.debian.org/security/2022/dsa-5103
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 3.15.9

EPSS0.00417

SSVC