OpenSSL -- Multiple vulnerabilities

2021-03-2500:00:00

vuxml.freebsd.org

openssl

multiple vulnerabilities

ca certificate check

x509_v_flag_x509_strict

null pointer deref

denial of service attack

tls server

security checks

certificate chain

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.005

Percentile

76.4%

JSON

The OpenSSL project reports:

High: CA certificate check bypass with X509_V_FLAG_X509_STRICT
(CVE-2021-3450)The X509_V_FLAG_X509_STRICT flag enables
additional security checks of the certificates present in a
certificate chain. It is not set by default.
High: NULL pointer deref in signature_algorithms processing
(CVE-2021-3449)An OpenSSL TLS server may crash if sent a
maliciously crafted renegotiation ClientHello message from a client.
If a TLSv1.2 renegotiation ClientHello omits the
signature_algorithms extension (where it was present in the initial
ClientHello), but includes a signature_algorithms_cert extension
then a NULL pointer dereference will result, leading to a crash and
a denial of service attack.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenssl< 1.1.1k,1UNKNOWN
FreeBSDanynoarchfreebsd= 12.2UNKNOWN
FreeBSDanynoarchfreebsd< 12.2_5UNKNOWN