MiracleLinux 7 : openssl-1.0.2k-22.el7 (AXSA:2021-2463:03)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2463:03 advisory. openssl: integer overflow in CipherUpdate CVE-2021-23840 openssl: NULL pointer dereference in X509issuerandserialhash CVE-2021-23841 Tenable has...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-23841 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-23841 Source advisory: OSV:GHSA-84RM-QF37-FGC2...

CVE-2021-23841

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:57+00:00| seen| https://t.me/cibsecurity/23663...