EUVD-2022-4935

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OpenSSL ASN1_STRING structure may cause buffer overruns if not NUL terminated, leading to Denial of Service.

Reporter	Title	Published	Views	Family All 705
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2021-3712) affects Power HMC	30 May 202207:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payments is vulnerable to OpenSSL Information Disclosure Problem (CVE-2021-3712)	24 Apr 202314:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in NX-OS Firmware used by IBM c-type SAN directors and switches.	23 Jan 202321:30	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple Security Vulnerabilities fixed in Openssl as shipped with IBM Security Verify products (CVE-2021-3711, CVE-2021-3712)	5 Nov 202117:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Security is affected by an OpenSSL vulnerability (CVE-2021-3712)	30 Mar 202216:05	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.3.0 and earlier (CVE-2021-3712)	13 Apr 202216:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities (CVE-2022-34339, CVE-2021-3712, CVE-2021-3711, CVE-2021-4160, CVE-2021-29425, CVE-2021-3733, CVE-2021-3737, CVE-2022-0391, CVE-2021-43138, CVE-2022-24758)	26 Mar 202502:27	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "6f23955d-f062-36a1-828c-ff04d2833747",
        "vendor": {
          "name": "OpenSSL"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0d6edf35-923e-33f1-bca1-71d9c0bbd574",
        "product": {
          "name": "OpenSSL"
        },
        "product_version": "Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)"
      },
      {
        "id": "fe6660ea-5540-362d-9ca1-48c1b9f61364",
        "product": {
          "name": "OpenSSL"
        },
        "product_version": "Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y)"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3712
tenable	www.tenable.com/security/tns-2022-02
tenable	www.tenable.com/security/tns-2021-16
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
openssl	www.openssl.org/news/secadv/20210824.txt
debian	www.debian.org/security/2021/dsa-4963
security	www.security.netapp.com/advisory/ntap-20240621-0006
security	www.security.netapp.com/advisory/ntap-20210827-0010

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.4

CVSS 25.8

EPSS0.0046