Lucene search
RedHatRHSA-2021:1131HistoryApr 07, 2021 - 3:12 p.m.
(RHSA-2021:1131) Important: openssl security update
2021-04-0715:12:41
access.redhat.com
84
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
70.9%
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
- openssl: NULL pointer dereference in signature_algorithms processing (CVE-2021-3449)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | i686 | openssl-debugsource | < 1.1.1c-5.el8_1 | openssl-debugsource-1.1.1c-5.el8_1.i686.rpm |
| RedHat | 8 | x86_64 | openssl-perl | < 1.1.1c-5.el8_1 | openssl-perl-1.1.1c-5.el8_1.x86_64.rpm |
| RedHat | 8 | ppc64le | openssl-perl | < 1.1.1c-5.el8_1 | openssl-perl-1.1.1c-5.el8_1.ppc64le.rpm |
| RedHat | 8 | s390x | openssl | < 1.1.1c-5.el8_1 | openssl-1.1.1c-5.el8_1.s390x.rpm |
| RedHat | 8 | x86_64 | openssl-devel | < 1.1.1c-5.el8_1 | openssl-devel-1.1.1c-5.el8_1.x86_64.rpm |
| RedHat | 8 | aarch64 | openssl-perl | < 1.1.1c-5.el8_1 | openssl-perl-1.1.1c-5.el8_1.aarch64.rpm |
| RedHat | 8 | aarch64 | openssl-libs-debuginfo | < 1.1.1c-5.el8_1 | openssl-libs-debuginfo-1.1.1c-5.el8_1.aarch64.rpm |
| RedHat | 8 | aarch64 | openssl-debuginfo | < 1.1.1c-5.el8_1 | openssl-debuginfo-1.1.1c-5.el8_1.aarch64.rpm |
| RedHat | 8 | x86_64 | openssl-debuginfo | < 1.1.1c-5.el8_1 | openssl-debuginfo-1.1.1c-5.el8_1.x86_64.rpm |
| RedHat | 8 | x86_64 | openssl-debugsource | < 1.1.1c-5.el8_1 | openssl-debugsource-1.1.1c-5.el8_1.x86_64.rpm |
Related
nessus
nessus
EulerOS 2.0 SP5 : openssl1.1.1d (EulerOS-SA-2021-2225)
2021-07-16 00:00:00
EulerOS 2.0 SP8 : openssl (EulerOS-SA-2021-1985)
2021-06-28 00:00:00
openSUSE Security Update : openssl-1_1 (openSUSE-2021-476)
2021-03-26 00:00:00
ibm
ibm
Security Bulletin: Potential DoS in IBM DataPower Gateway
2021-08-16 15:12:36
suse
suse
Security update for openssl-1_1 (important)
2021-03-26 00:00:00
Security update for nodejs12 (important)
2021-07-14 00:00:00
Security update for nodejs10 (important)
2021-07-20 00:00:00
f5
f5
K83623027 : OpenSSL vulnerability CVE-2021-3449
2021-03-26 00:00:00
osv
osv
BIT-node-2021-3449
2024-03-06 11:05:44
openssl vulnerability
2021-03-25 14:29:46
CVE-2021-3449
2021-03-25 15:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2021-1970)
2021-06-07 00:00:00
openSUSE: Security Advisory for openssl-1_1 (openSUSE-SU-2021:0476-1)
2021-04-16 00:00:00
Huawei EulerOS: Security Advisory for openssl1.1.1d (EulerOS-SA-2021-2225)
2021-07-19 00:00:00
debiancve
debiancve
CVE-2021-3449
2021-03-25 15:15:00
ubuntu
ubuntu
OpenSSL vulnerability
2021-03-25 00:00:00
PostgreSQL vulnerabilities
2021-08-12 00:00:00
rustsec
rustsec
NULL pointer deref in signature_algorithms processing
2021-05-01 12:00:00
githubexploit
githubexploit
Exploit for NULL Pointer Dereference in Openssl
2021-03-26 01:09:25
Exploit for NULL Pointer Dereference in Openssl
2023-09-08 10:53:39
cloudfoundry
cloudfoundry
USN-4891-1: OpenSSL vulnerability | Cloud Foundry
2021-04-14 00:00:00
redhatcve
redhatcve
CVE-2021-3449
2021-03-25 14:58:10
debian
debian
[SECURITY] [DLA 2751-1] postgresql-9.6 security update
2021-08-31 14:03:14
[SECURITY] [DSA 4875-1] openssl security update
2021-03-25 15:41:28
[SECURITY] [DSA 4875-1] openssl security update
2021-03-25 15:41:28
seebug
seebug
OpenSSL 拒绝服务攻击（CVE-2021-3449）
2021-03-29 00:00:00
mscve
mscve
OpenSSL: CVE-2021-3449 NULL pointer deref in signature_algorithms processing
2021-10-12 07:00:00
ubuntucve
ubuntucve
CVE-2021-3449
2021-03-25 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2021-3449
2021-03-25 00:00:00
alpinelinux
alpinelinux
CVE-2021-3449
2021-03-25 15:15:00
redhat
redhat
(RHSA-2021:1063) Important: openssl security update
2021-04-05 13:17:44
(RHSA-2021:1199) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
2021-04-14 15:45:52
(RHSA-2021:1196) Important: Red Hat JBoss Web Server 5.4.2 Security Update
2021-04-14 14:29:30
cve
cve
CVE-2021-3449
2021-03-25 15:15:00
checkpoint_security
checkpoint_security
Check Point Response to OpenSSL CVE-2021-3449
2021-04-10 23:31:27
veracode
veracode
Denial Of Service (DoS)
2021-03-25 16:28:32
prion
prion
Null pointer dereference
2021-03-25 15:15:00
github
github
openssl-src NULL pointer Dereference in signature_algorithms processing
2021-08-25 20:54:02
ics
ics
Siemens OpenSSL Vulnerabilities in Industrial Products (Update B)
2022-08-11 12:00:00
attackerkb
attackerkb
OpenSSL TLS Server Crash (NULL pointer dereference) — CVE-2021-3449
2021-03-25 00:00:00
CVE-2021-3450
2021-03-25 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0331
2021-03-25 00:00:00
Important Photon OS Security Update - PHSA-2021-0331
2021-03-25 00:00:00
Important Photon OS Security Update - PHSA-2021-0210
2021-03-26 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-21:07.openssl
2021-03-25 00:00:00
oraclelinux
oraclelinux
openssl security update
2021-04-01 00:00:00
openssl security update
2021-03-29 00:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2021-04-05 18:54:07
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1k-alt1
2021-03-25 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1k-alt1
2021-03-29 00:00:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
2021-03-25 16:00:00
archlinux
archlinux
[ASA-202103-10] openssl: multiple issues
2021-03-25 00:00:00
amazon
amazon
Important: openssl11
2021-03-25 18:31:00
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2021-03-25 00:00:00
Node.js -- April 2021 Security Releases
2021-04-06 00:00:00
thn
thn
OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
2021-03-26 14:56:00
almalinux
almalinux
Important: openssl security update
2021-03-29 19:03:22
symantec
symantec
OpenSSL Vulnerabilities Mar 2021
2021-04-07 19:44:57
fedora
fedora
[SECURITY] Fedora 34 Update: openssl-1.1.1k-1.fc34
2021-04-01 00:53:20
rocky
rocky
openssl security update
2021-03-29 19:03:22
nodejsblog
nodejsblog
April 2021 Security Releases
2021-04-06 00:00:00
kaspersky
kaspersky
KLA12311 Multiple vulnerabilities in Microsoft Developer Tools
2021-10-12 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2021-03-31 00:00:00
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.003 Low
EPSS
Percentile
70.9%
Related for RHSA-2021:1131