Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

PT-2021-2477 · Openssl +6 · Openssl +6

🗓️ 25 Mar 2021 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 18 Views

OpenSSL 1.1.1h–1.1.1j have a chain check bypass when X509 STRICT is set; upgrade to 1.1.1k.

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.
14 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		Vulnerability of the Server component: Memcached in the MySQL database management system, which allows attackers to cause service interruptions.
14 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the OpenSSL library, related to errors in managing cryptographic keys, allows a hacker to recover secret ECDSA P-256 keys.
20 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the OpenSSL library, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.
21 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the tls_decrypt_ticket function in the OpenSSL library exists due to insufficient validation of input data, allowing attackers to trigger a service failure.
21 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the ts_obj_print_bio function in the OpenSSL library, which allows a hacker to cause a service failure
25 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability in the implementation of the DTLS protocol by the OpenSSL library, which allows a hacker to cause a service failure.
25 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the dsa_sign_setup function in the OpenSSL library, which relates to the disclosure of protected information, allows attackers to circumvent cryptographic mechanisms used for encryption protection.
25 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the OpenSSL library, caused by a numerical overflow, allows attackers to trigger a service failure or possibly cause other adverse effects.
25 Apr 202200:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability in the implementation of the Kerberos network protocol on Debian GNU/Linux, Red Hat Enterprise Linux, Ubuntu, Fedora, and Alt 8 SP operating systems allows a perpetrator to cause a service failure.
26 Jun 202300:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Dec 2024 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.17.4 - 9.8
CVSS 210
CVSS 38 - 9.8
EPSS0.99999
SSVC
openssl versions 1.1.1hopenssl versions 1.1.1jcertificate chain checkstrict verification flagcertificate purpose checksupgrade to 1.1.1k
18