172 matches found
FreeBSD : Node.js -- April 2021 Security Releases (c0c1834c-9761-11eb-acfd-0022489ad614)
Node.js reports : OpenSSL - CA certificate check bypass with X509VFLAGX509STRICT High CVE-2021-3450 This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt OpenSSL - NULL pointer deref in...
RHEL 7 : Red Hat JBoss Web Server 3.1 Service Pack 12 (RHSA-2021:1202)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1202 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...
RHEL 7 / 8 : Red Hat JBoss Web Server 5.4.2 Security Update (Important) (RHSA-2021:1195)
The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1195 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...
Tenable Nessus Agent 8.2.1 - 8.2.3 Third-Party Vulnerability (TNS-2021-08)
Tenable Nessus Agent is prone to a vulnerability in a third-party component OpenSSL. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
OpenSSL Vulnerabilities Mar 2021
Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to two vulnerabilities. A remote attacker may be able to cause denial of service through application crashes. An application may successfully validate an invalid X.509 certificate...
Photon OS 4.0: Openssl PHSA-2021-4.0-0007
An update of the openssl package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0007. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148355;...
Tenable Nessus <= 8.13.1 Multiple Third-party Vulnerabilities (TNS-2021-05)
Tenable Nessus is prone to multiple third-party vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessus";...
Node.js -- April 2021 Security Releases
Node.js reports: OpenSSL - CA certificate check bypass with X509VFLAGX509STRICT High CVE-2021-3450 This is a vulnerability in OpenSSL which may be exploited through Node.js. You can read more about it in https://www.openssl.org/news/secadv/20210325.txt OpenSSL - NULL pointer deref in...
Updated openssl packages fix security vulnerability
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension where it was present in the initial ClientHello, but includes a signaturealgorithmscert extension then a NU...
Tenable Nessus 8.9.0 < 8.13.2 Multiple Vulnerabilities (TNS-2021-05)
According to its self-reported version, the Tenable Nessus application running on the remote host is 8.9.0 prior to 8.13.2. It is, therefore, affected by multiple vulnerabilities: - An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a...
Oracle Linux 8 : openssl (ELSA-2021-9151) (deprecated)
This plugin has been deprecated, please use oraclelinuxELSA-2021-1024.nasl instead. C Tenable Network Security, Inc. @DEPRECATED@ The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2021-9151. Disabled on 2021/04/28. Use...
RLSA-2021:1024 Important: openssl security update
OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: NULL pointer dereference in signaturealgorithms processing CVE-2021-3449 openssl: CA certificate...
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1k-alt1
1.1.1k-alt1 built March 29, 2021 Gleb Fotengauer-Malinovskiy in task 268376 March 25, 2021 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1k fixes CVE-2021-3450, CVE-2021-3449...
OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service DoS attacks and bypass certificate verification. Tracked as CVE-2021-3449 and CVE-2021-3450 , both the vulnerabilities have been resolved in a...
OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service DoS attacks and bypass certificate verification. Tracked as CVE-2021-3449 and CVE-2021-3450, both the vulnerabilities have been resolved in an...
OpenSSL: CA Certificate Check Bypass Vulnerability (CVE-2021-3450) - Windows
OpenSSL is prone to a CA certificate check bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Photon OS 2.0: Nxtgn PHSA-2021-2.0-0331
An update of the nxtgn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0331. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid148186...
CVE-2021-3450
creationtimestamp| type| source ---|---|--- 2021-03-25 17:13:49+00:00| seen| https://t.me/BleepingComputer/9406 2021-03-26 15:59:46+00:00| seen| https://t.me/thehackernews/1114 2026-03-31 07:46:57+00:00| seen| https://gist.github.com/DmitriyLewen/1a8cf11df4bf524d609e669f6be82bb5...
CVE-2021-3450
CVE-2021-3450 affects OpenSSL 1.1.1h–1.1.1j where a bug in the X509_V_FLAG_X509_STRICT path overwrote a prior CA-check result, bypassing the non-CA certificates prohibition unless a programmed purpose is used. When a purpose is configured, the certificate chain is still rejected; the issue is fix...