OESA-2021-1147 openssl security update

🗓️ 20 Apr 2021 11:02:49Reported by GoogleType

osv🔗 osv.dev👁 5 Views

OpenSSL fixes a TLS renegotiation crash that can cause denial of service when a crafted ClientHello omits the signature_algorithms extension but includes the signature_algorithms_cert extension.

Reporter	Title	Published	Views	Family All 410
ibm	Security Bulletin: Multiple vulnerabilities in OpenSSL may affect IBM Workload Scheduler	8 Sep 202109:42	–	ibm
ibm	Security Bulletin: Potential DoS in IBM DataPower Gateway	16 Aug 202115:12	–	ibm
ibm	Security Bulletin: Cloud Pak for Security has several security vulnerabilities addressed in the latest version	30 Jul 202107:38	–	ibm
ibm	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise Certified Container may be affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	30 Apr 202113:30	–	ibm
ibm	Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerabilities (CVE-2021-3449 and CVE-2021-3450)	14 Jun 202114:05	–	ibm
ibm	Security Bulletin: App Connect Professional & IBM WebSphere Cast Iron Solution are affected by OpenSSL vulnerability	22 Dec 202110:16	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in OpenSSL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors	14 Jul 202118:41	–	ibm
ibm	Security Bulletin:Multiple vulnerabilities fixed in IBM Security Verify Bridge - Docker	22 Sep 202122:32	–	ibm
ibm	Security Bulletin: OpenSSL Vulnerabilities Affect IBM Sterling Connect:Express for UNIX (CVE-2021-3449, CVE-2021-3450)	17 May 202114:30	–	ibm

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-3449

03 Sep 2025 06:17Current

8.3High risk

Vulners AI Score8.3

CVSS 24.3

CVSS 3.15.9

EPSS0.62906