Denial Of Service (DoS)

🗓️ 15 Dec 2021 19:49:23Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 28 Views

openssl3:edge vulnerability on denial of service by mishandling negative return values causing unexpected behavior in SSL applications

Reporter	Title	Published	Views	Family All 57
FreeBSD	OpenSSL -- Certificate validation issue	14 Dec 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerability in Fabric OS firmware used by IBM b-type SAN directors and switches.	31 Aug 202200:17	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Team Concert (RTC) and IBM Engineering Workflow Management (EWM) OpenSSL vulnerability CVE-2021-4044	21 Jun 202214:53	–	ibm
AlpineLinux	CVE-2021-4044	14 Dec 202118:40	–	alpinelinux
Broadcom	CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl	8 Nov 202200:00	–	broadcom
Broadcom	CVE-2021-4044: Invalid handling of X509_verify_cert() internal errors in libssl	8 Nov 202200:00	–	broadcom
Tenable Nessus	CentOS 9 : openssl-3.0.7-18.el9	26 Apr 202400:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Certificate validation issue (0132ca5b-5d11-11ec-8be6-d4c9ef517024)	14 Dec 202100:00	–	nessus
Tenable Nessus	OpenSSL 3.0.0 < 3.0.1 Multiple Vulnerabilities	15 Dec 202100:00	–	nessus
Tenable Nessus	Oracle Linux 9 : openssl (ELSA-2022-9968)	1 Nov 202200:00	–	nessus

Vulners

Node

openssl3 openssl3Match3.0.0-r4os

AND

alpinelinux alpine_linuxMatchedge

openssl3 openssl3Match3.0.0-r3os

AND

openssl3 openssl3Match3.0.0-r4os

AND

alpinelinux alpine_linuxMatch3.15

openssl opensslMatch3.0.0-r0os

AND

openssl opensslMatch1.1.1k-r0os

AND

openssl opensslMatch1.1.1m-r3os

AND

openssl opensslMatch1.1.1m-r1os

AND

openssl opensslMatch1.1.1g-r0os

AND

openssl opensslMatch1.1.1m-r2os

AND

openssl opensslMatch1.1.1p-r0os

AND

openssl opensslMatch1.1.1n-r0os

AND

openssl opensslMatch1.1.1l-r0os

AND

openssl opensslMatch1.1.1d-r4os

AND

openssl opensslMatch1.1.1d-r5os

AND

openssl opensslMatch1.1.1q-r0os

AND

openssl opensslMatch1.1.1l-r7os

AND

openssl opensslMatch1.1.1l-r5os

AND

openssl opensslMatch1.1.1o-r0os

AND

openssl opensslMatch1.1.1j-r0os

AND

openssl opensslMatch1.1.1e-r0os

AND

openssl opensslMatch3.0.0-r2os

AND

openssl opensslMatch1.1.1k-r1os

AND

openssl opensslMatch1.1.1f-r0os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
git	www.git.openssl.org/gitweb/
git	www.git.openssl.org/gitweb/
security	www.security.netapp.com/advisory/ntap-20211229-0003/
openssl	www.openssl.org/news/secadv/20211214.txt

09 Nov 2023 16:37Current

2Low risk

Vulners AI Score2

CVSS 25

CVSS 3.17.5

EPSS0.3328

denial of service vulnerability openssl x509_verify_cert()ssl_connect()ssl_do_handshake()ssl_error_want_retry_verify certificate authority