MiracleLinux 7 : openssl-1.0.2k-22.el7 (AXSA:2021-2463:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2463:03 advisory. openssl: integer overflow in CipherUpdate CVE-2021-23840 openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Tenable has...

CLSA-2021-1634922862 Fixed CVE-2021-23840 in openssl

Fixed integer overflow in CipherUpdateCVE-2021-23840...

CLSA-2021-1632261785 Fix of CVE: CVE-2021-23840

Fixed integer overflow in CipherUpdateCVE-2021-23840...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-23840 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-23840 Source advisory: OSV:GHSA-QGM6-9472-PWQ7...

CVE-2021-23840

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:56+00:00| seen| https://t.me/cibsecurity/23662 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-03-31 07:46:57+00:00| seen| https://gist.github.com/DmitriyLewen/1a8cf11df4bf524d609e669f6be82b...