CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS

🗓️ 28 Jan 2022 21:28:41Reported by opensslType

CVE-2021-4160: MIPS32/MIPS64 squaring procedure carry propagation bug in OpenSS

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2022-34339, CVE-2021-3712, CVE-2021-3711, CVE-2021-4160, CVE-2021-29425, CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-43138, CVE-2022-24758)	26 Mar 202502:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents	21 Sep 202220:55	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise & IBM Integration Bus (CVE-2021-4160)	12 May 202214:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management may provide weaker than expected security due to OpenSSL through a carry propogation flaw (CVE-2021-4160)	25 Oct 202414:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to weakened security in OpenSSL ( CVE-2021-4160)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in multiple dependencies affect IBM MessageGateway/ MessageSight	29 Apr 202502:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Mar 202418:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2021-4160)	2 Feb 202317:27	–	ibm

[
  {
    "vendor": "OpenSSL",
    "product": "OpenSSL",
    "versions": [
      {
        "version": "Fixed in OpenSSL 3.0.1 (Affected 3.0.0)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l)",
        "status": "affected"
      },
      {
        "version": "Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
git	www.git.openssl.org/gitweb/
security	www.security.gentoo.org/glsa/202210-02
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20240621-0006/
git	www.git.openssl.org/gitweb/
oracle	www.oracle.com/security-alerts/cpujul2022.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
openssl	www.openssl.org/news/secadv/20220128.txt
debian	www.debian.org/security/2022/dsa-5103
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Jun 2024 19:07Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.00417