Lucene search

CVE-2021-3449

🗓️ 25 Mar 2021 15:13:15Reported by [email protected]Type

OpenSSL TLS server crash vulnerability due to malicious ClientHello messag

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: Potential DoS in IBM DataPower Gateway	16 Aug 202115:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by an OpenSSL vulnerability (CVE-2021-3449)	30 Jun 202110:50	–	ibm
IBM Security Bulletins	Security Bulletin: z/TPF is affected by an OpenSSL vulnerability	29 Apr 202115:58	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerability affects MessageGateway (CVE-CVE-2021-3449)	21 Jun 202121:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects Power Hardware Management Console (CVE-2021-3449).	22 Sep 202123:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Fabric OS used by IBM b-type SAN directors and switches.	4 Aug 202123:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus and IBM App Connect Enterprise v11 are affected by vulnerabilities in Node.js (CVE-2021-3450, CVE-2021-3449)	4 Aug 202107:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to OpenSSL vulnerabilities (CVE-2021-3449, CVE-2021-3450)	3 Sep 202113:44	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE 2021-3450 and CVE 2021-3449	7 Dec 202114:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Elastic Storage System systems are affected by vulnerabilities in OpenSSL	19 May 202110:06	–	ibm

Nvd

Node

openssl opensslRange1.1.1–1.1.1k

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

freebsd freebsdMatch12.2-

freebsd freebsdMatch12.2p1

freebsd freebsdMatch12.2p2

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp cloud_volumes_ontap_mediatorMatch-

netapp e-series_performance_analyzerMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp santricity_smi-s_providerMatch-

netapp snapcenterMatch-

netapp storagegridMatch-

Node

tenable log_correlation_engineRange<6.0.9

tenable nessusRange≤8.13.1

tenable nessus_network_monitorMatch5.11.0

tenable nessus_network_monitorMatch5.11.1

tenable nessus_network_monitorMatch5.12.0

tenable nessus_network_monitorMatch5.12.1

tenable nessus_network_monitorMatch5.13.0

tenable tenable.scRange5.13.0–5.17.0

Node

fedoraproject fedoraMatch34

Node

mcafee web_gatewayMatch8.2.19

mcafee web_gatewayMatch9.2.10

mcafee web_gatewayMatch10.1.1

mcafee web_gateway_cloud_serviceMatch8.2.19

mcafee web_gateway_cloud_serviceMatch9.2.10

mcafee web_gateway_cloud_serviceMatch10.1.1

Node

checkpoint quantum_security_management_firmwareMatchr80.40

checkpoint quantum_security_management_firmwareMatchr81

AND

checkpoint quantum_security_managementMatch-

Node

checkpoint multi-domain_management_firmwareMatchr80.40

checkpoint multi-domain_management_firmwareMatchr81

AND

checkpoint multi-domain_managementMatch-

Node

checkpoint quantum_security_gateway_firmwareMatchr80.40

checkpoint quantum_security_gateway_firmwareMatchr81

AND

checkpoint quantum_security_gatewayMatch-

Node

oracle communications_communications_policy_managementMatch12.6.0.0.0

oracle enterprise_manager_for_storage_managementMatch13.4.0.0

oracle essbaseMatch21.2

oracle graalvmMatch19.3.5enterprise

oracle graalvmMatch20.3.1.2enterprise

oracle graalvmMatch21.0.0.2enterprise

oracle jd_edwards_enterpriseone_toolsRange<9.2.6.0

oracle jd_edwards_world_securityMatcha9.4

oracle mysql_connectorsRange≤8.0.23

oracle mysql_serverRange≤5.7.33

oracle mysql_serverRange8.0.15–8.0.23

oracle mysql_workbenchRange≤8.0.23

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle peoplesoft_enterprise_peopletoolsMatch8.58

oracle peoplesoft_enterprise_peopletoolsMatch8.59

oracle primavera_unifierRange17.7–17.12

oracle primavera_unifierMatch19.12

oracle primavera_unifierMatch20.12

oracle primavera_unifierMatch21.12

oracle secure_backupRange<18.1.0.1.0

oracle secure_global_desktopMatch5.6

oracle zfs_storage_appliance_kitMatch8.8

Node

sonicwall sma100_firmwareRange10.2.0.0–10.2.1.0-17sv

AND

sonicwall sma100Match-

Node

sonicwall capture_clientMatch3.5

sonicwall sonicosMatch7.0.1.0

Node

siemens ruggedcom_rcm1224_firmwareRange6.2≥

AND

siemens ruggedcom_rcm1224Match-

Node

siemens scalance_lpe9403_firmware

AND

siemens scalance_lpe9403Match-

Node

siemens scalance_m-800_firmwareRange6.2≥

AND

siemens scalance_m-800Match-

Node

siemens scalance_s602_firmwareRange4.1≥

AND

siemens scalance_s602Match-

Node

siemens scalance_s612_firmwareRange4.1≥

AND

siemens scalance_s612Match-

Node

siemens scalance_s615_firmwareRange6.2≥

AND

siemens scalance_s615Match-

Node

siemens scalance_s623_firmwareRange4.1≥

AND

siemens scalance_s623Match-

Node

siemens scalance_s627-2m_firmwareRange4.1≥

AND

siemens scalance_s627-2mMatch-

Node

siemens scalance_sc-600_firmwareRange2.0≥

AND

siemens scalance_sc-600Match-

Node

siemens scalance_w700_firmwareRange6.5≥

AND

siemens scalance_w700Match-

Node

siemens scalance_w1700_firmwareRange2.0≥

AND

siemens scalance_w1700Match-

Node

siemens scalance_xb-200_firmwareRange<4.3

AND

siemens scalance_xb-200Match-

Node

siemens scalance_xc-200_firmwareRange<4.3

AND

siemens scalance_xc-200Match-

Node

siemens scalance_xf-200ba_firmwareRange<4.3

AND

siemens scalance_xf-200baMatch-

Node

siemens scalance_xm-400_firmwareRange<6.4

AND

siemens scalance_xm-400Match-

Node

siemens scalance_xp-200_firmwareRange<4.3

AND

siemens scalance_xp-200Match-

Node

siemens scalance_xr-300wg_firmwareRange<4.3

AND

siemens scalance_xr-300wgMatch-

Node

siemens scalance_xr524-8c_firmwareRange<6.4

AND

siemens scalance_xr524-8cMatch-

Node

siemens scalance_xr526-8c_firmwareRange<6.4

AND

siemens scalance_xr526-8cMatch-

Node

siemens scalance_xr528-6m_firmwareRange<6.4

AND

siemens scalance_xr528-6mMatch-

Node

siemens scalance_xr552-12_firmwareRange<6.4

AND

siemens scalance_xr552-12Match-

Node

siemens simatic_cloud_connect_7_firmwareRange1.1≥

siemens simatic_cloud_connect_7_firmwareMatch-

AND

siemens simatic_cloud_connect_7Match-

Node

siemens simatic_cp_1242-7_gprs_v2_firmwareRange3.1≥

siemens simatic_cp_1242-7_gprs_v2_firmwareMatch-

AND

siemens simatic_cp_1242-7_gprs_v2Match-

Node

siemens simatic_hmi_basic_panels_2nd_generation_firmware

AND

siemens simatic_hmi_basic_panels_2nd_generationMatch-

Node

siemens simatic_hmi_comfort_outdoor_panels_firmware

AND

siemens simatic_hmi_comfort_outdoor_panelsMatch-

Node

siemens simatic_hmi_ktp_mobile_panels_firmware

AND

siemens simatic_hmi_ktp_mobile_panelsMatch-

Node

siemens simatic_mv500_firmware

AND

siemens simatic_mv500Match-

Node

siemens simatic_net_cp_1243-1_firmwareRange3.1≥

AND

siemens simatic_net_cp_1243-1Match-

Node

siemens simatic_net_cp1243-7_lte_eu_firmwareRange3.1≥

AND

siemens simatic_net_cp1243-7_lte_euMatch-

Node

siemens simatic_net_cp1243-7_lte_us_firmwareRange3.1≥

AND

siemens simatic_net_cp1243-7_lte_usMatch-

Node

siemens simatic_net_cp_1243-8_irc_firmwareRange3.1≥

AND

siemens simatic_net_cp_1243-8_ircMatch-

Node

siemens simatic_net_cp_1542sp-1_irc_firmwareRange2.1≥

AND

siemens simatic_net_cp_1542sp-1_ircMatch-

Node

siemens simatic_net_cp_1543-1_firmwareRange2.2–3.0

AND

siemens simatic_net_cp_1543-1Match-

Node

siemens simatic_net_cp_1543sp-1_firmwareRange2.1≥

AND

siemens simatic_net_cp_1543sp-1Match-

Node

siemens simatic_net_cp_1545-1_firmwareRange1.0≥

AND

siemens simatic_net_cp_1545-1Match-

Node

siemens simatic_pcs_7_telecontrol_firmware

AND

siemens simatic_pcs_7_telecontrolMatch-

Node

siemens simatic_pcs_neo_firmware

AND

siemens simatic_pcs_neoMatch-

Node

siemens simatic_pdm_firmwareRange9.1.0.7≥

AND

siemens simatic_pdmMatch-

Node

siemens simatic_process_historian_opc_ua_server_firmwareRange2019≥

AND

siemens simatic_process_historian_opc_ua_serverMatch-

Node

siemens simatic_rf166c_firmware

AND

siemens simatic_rf166cMatch-

Node

siemens simatic_rf185c_firmware

AND

siemens simatic_rf185cMatch-

Node

siemens simatic_rf186c_firmware

AND

siemens simatic_rf186cMatch-

Node

siemens simatic_rf186ci_firmware

AND

siemens simatic_rf186ciMatch-

Node

siemens simatic_rf188c_firmware

AND

siemens simatic_rf188cMatch-

Node

siemens simatic_rf188ci_firmware

AND

siemens simatic_rf188ciMatch-

Node

siemens simatic_rf360r_firmware

AND

siemens simatic_rf360rMatch-

Node

siemens simatic_s7-1200_cpu_1211c_firmware

AND

siemens simatic_s7-1200_cpu_1211cMatch-

Node

siemens simatic_s7-1200_cpu_1212c_firmware

AND

siemens simatic_s7-1200_cpu_1212cMatch-

Node

siemens simatic_s7-1200_cpu_1212fc_firmware

AND

siemens simatic_s7-1200_cpu_1212fcMatch-

Node

siemens simatic_s7-1200_cpu_1214_fc_firmware

AND

siemens simatic_s7-1200_cpu_1214_fcMatch-

Node

siemens simatic_s7-1200_cpu_1214c_firmware

AND

siemens simatic_s7-1200_cpu_1214cMatch-

Node

siemens simatic_s7-1200_cpu_1214_fc_firmware

AND

siemens simatic_s7-1200_cpu_1214_fcMatch-

Node

siemens simatic_s7-1200_cpu_1215_fc_firmware

AND

siemens simatic_s7-1200_cpu_1215_fcMatch-

Node

siemens simatic_s7-1200_cpu_1215c_firmware

AND

siemens simatic_s7-1200_cpu_1215cMatch-

Node

siemens simatic_s7-1200_cpu_1217c_firmware

AND

siemens simatic_s7-1200_cpu_1217cMatch-

Node

siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware

AND

siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfpMatch-

Node

siemens sinamics_connect_300_firmware

AND

siemens sinamics_connect_300Match-

Node

siemens tim_1531_irc_firmwareRange2.0–2.2

AND

siemens tim_1531_ircMatch-

Node

siemens simatic_logonRange1.6.0.2≥

siemens simatic_logonMatch1.5sp3_update_1

siemens simatic_wincc_runtime_advanced

siemens simatic_wincc_telecontrolMatch-

siemens sinec_nmsMatch1.0-

siemens sinec_nmsMatch1.0sp1

siemens sinec_pniMatch-

siemens sinema_serverMatch14.0-

siemens sinema_serverMatch14.0sp1

siemens sinema_serverMatch14.0sp2

siemens sinema_serverMatch14.0sp2_update1

siemens sinema_serverMatch14.0sp2_update2

siemens sinumerik_opc_ua_server

siemens tia_administrator

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Node

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.24.0lts

nodejs node.jsRange12.0.0–12.12.0-

nodejs node.jsRange12.13.0–12.22.1lts

nodejs node.jsRange14.0.0–14.14.0-

nodejs node.jsRange14.15.0–14.16.1lts

nodejs node.jsRange15.0.0–15.14.0-

Source	Link
tenable	www.tenable.com/security/tns-2021-05
tenable	www.tenable.com/security/tns-2021-09
git	www.git.openssl.org/gitweb/
openwall	www.openwall.com/lists/oss-security/2021/03/28/4
openwall	www.openwall.com/lists/oss-security/2021/03/27/2
oracle	www.oracle.com//security-alerts/cpujul2021.html
kb	www.kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845
openwall	www.openwall.com/lists/oss-security/2021/03/28/3
oracle	www.oracle.com/security-alerts/cpuoct2021.html
security	www.security.netapp.com/advisory/ntap-20210326-0006/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Mar 2021 15:15Current

CVSS24.3

CVSS35.9

EPSS0.05672

CWE-476