Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huaweiHuawei TechnologiesHUAWEI-SA-20200715-01-OPENSSL
HistoryJul 15, 2020 - 12:00 a.m.

Security Advisory - Denial of Service Vulnerability in OpenSSL

2020-07-1500:00:00
Huawei Technologies
www.huawei.com
45
openssl
dos vulnerability
tls 1.3

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.081

Percentile

94.3%

JSON

There is a Denial of Service (DoS) vulnerability in Openssl. Specific function in Openssl may crash during or after the TLS 1.3 handshake due to a NULL pointer dereference. Attacker may send crafted request packet to the target host service to exploit this vulnerability. Successful exploit may cause the affected service crash or deny of service. (Vulnerability ID: HWPSIRT-2020-16617)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-1967.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-01-openssl-en

Affected configurations

Vulners
Node
huaweifusioncube_firmwareMatch3.2.1.spc201
OR
huaweifusioncube_firmwareMatch6.0.0
OR
huaweifusioncube_firmwareMatch6.0.rc3
OR
huaweimyna_firmwareMatch9.0.1.10
OR
huaweielog_firmwareMatchv200r007c10spc102
VendorProductVersionCPE
huaweifusioncube_firmware3.2.1.spc201cpe:2.3:o:huawei:fusioncube_firmware:3.2.1.spc201:*:*:*:*:*:*:*
huaweifusioncube_firmware6.0.0cpe:2.3:o:huawei:fusioncube_firmware:6.0.0:*:*:*:*:*:*:*
huaweifusioncube_firmware6.0.rc3cpe:2.3:o:huawei:fusioncube_firmware:6.0.rc3:*:*:*:*:*:*:*
huaweimyna_firmware9.0.1.10cpe:2.3:o:huawei:myna_firmware:9.0.1.10:*:*:*:*:*:*:*
huaweielog_firmwarev200r007c10spc102cpe:2.3:o:huawei:elog_firmware:v200r007c10spc102:*:*:*:*:*:*:*

Related

openvas 22
nessus 27
suse 2
osv 7
openssl 1
debian 1
githubexploit 1
debiancve 1
redhatcve 1
freebsd_advisory 1
ibm 8
f5 1
prion 1
github 1
checkpoint_advisories 1
archlinux 2
freebsd 2
mscve 1
nvd 1
cve 1
ubuntucve 1
rustsec 1
alpinelinux 1
cvelist 1
veracode 1
altlinux 2
fedora 3
gentoo 1
photon 4
ics 1
hp 1
symantec 1
hackerone 1
oracle 6
openvas
openvas
OpenSSL: Segmentation fault in SSL_check_chain (CVE-2020-1967) - Windows
2020-04-22 00:00:00
Huawei EulerOS: Security Advisory for openssl111d (EulerOS-SA-2020-1613)
2020-06-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2041-1)
2021-06-09 00:00:00
nessus
nessus
Debian DSA-4661-1 : openssl - security update
2020-04-22 00:00:00
EulerOS 2.0 SP5 : openssl111d (EulerOS-SA-2020-1613)
2020-06-02 00:00:00
Photon OS 2.0: Nxtgn PHSA-2020-2.0-0233
2024-07-22 00:00:00
suse
suse
Security update for rust, rust-cbindgen (moderate)
2020-07-07 00:00:00
Security update for rust, rust-cbindgen (moderate)
2020-07-06 00:00:00
osv
osv
CGA-cxcm-cwpp-cj4c
2024-07-04 22:10:15
CVE-2020-1967
2020-04-21 14:15:11
Null pointer deference in openssl-src
2021-08-25 20:45:15
openssl
openssl
Vulnerability in OpenSSL - Segmentation fault in SSL_check_chain
2020-04-21 00:00:00
debian
debian
[SECURITY] [DSA 4661-1] openssl security update
2020-04-21 13:58:12
githubexploit
githubexploit
Exploit for NULL Pointer Dereference in Openssl
2020-04-28 21:15:35
debiancve
debiancve
CVE-2020-1967
2020-04-21 14:15:11
redhatcve
redhatcve
CVE-2020-1967
2020-04-21 13:33:41
freebsd_advisory
freebsd_advisory
FreeBSD-SA-20:11.openssl
2020-04-21 00:00:00
ibm
ibm
Security Bulletin: OpenSSL for IBM i is affected by CVE-2020-1967
2020-06-19 14:58:12
Security Bulletin: Denial Of Service vulnerability in OpenSSL affects IBM Safer Payments (CVE-2020-1967)
2023-04-24 13:10:12
Security Bulletin: OpenSSL disclosed vulnerability affects MessageGatweay (CVE-2020-1967)
2020-04-30 17:09:17
f5
f5
K01251345 : OpenSSL vulnerability CVE-2020-1967
2020-04-23 00:00:00
prion
prion
Null pointer dereference
2020-04-21 14:15:00
github
github
Null pointer deference in openssl-src
2021-08-25 20:45:15
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS NULL Pointer Dereference Denial of Service (CVE-2020-1967)
2020-06-02 00:00:00
archlinux
archlinux
[ASA-202004-19] lib32-openssl: denial of service
2020-04-22 00:00:00
[ASA-202004-18] openssl: denial of service
2020-04-21 00:00:00
freebsd
freebsd
OpenSSL remote denial of service vulnerability
2020-04-21 00:00:00
Gitlab -- Multiple Vulnerabilities
2020-04-30 00:00:00
mscve
mscve
OpenSSL Remote Denial of Service Vulnerability
2020-04-21 07:00:00
nvd
nvd
CVE-2020-1967
2020-04-21 14:15:11
cve
cve
CVE-2020-1967
2020-04-21 14:15:11
ubuntucve
ubuntucve
CVE-2020-1967
2020-04-21 00:00:00
rustsec
rustsec
Crash causing Denial of Service attack
2020-04-25 12:00:00
alpinelinux
alpinelinux
CVE-2020-1967
2020-04-21 14:15:11
cvelist
cvelist
CVE-2020-1967 Segmentation fault in SSL_check_chain
2020-04-21 13:45:15
veracode
veracode
Denial Of Service (DoS)
2020-08-06 21:28:47
altlinux
altlinux
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1g-alt1
2020-04-21 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1g-alt1
2020-04-29 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: openssl-1.1.1g-1.fc32
2020-04-26 02:51:31
[SECURITY] Fedora 30 Update: openssl-1.1.1g-1.fc30
2020-04-30 02:52:05
[SECURITY] Fedora 31 Update: openssl-1.1.1g-1.fc31
2020-05-09 04:12:38
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2020-04-23 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0233
2020-04-21 00:00:00
Important Photon OS Security Update - PHSA-2020-0233
2020-04-22 00:00:00
Important Photon OS Security Update - PHSA-2020-0082
2020-04-22 00:00:00
ics
ics
Siemens SIDIS Prime
2024-02-15 12:00:00
hp
hp
HP PC BIOS September 2023 Security Updates for OpenSSL
2023-09-05 00:00:00
symantec
symantec
OpenSSL Vulnerabilities Sep 2019 – Apr 2020
2020-05-19 20:35:38
hackerone
hackerone
U.S. Dept Of Defense: Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
2020-05-14 19:38:44
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.081

Percentile

94.3%

JSON
Related for HUAWEI-SA-20200715-01-OPENSSL
openvas22nessus27suse2osv7openssl1debian1githubexploit1debiancve1redhatcve1freebsd_advisory1ibm8f51prion1github1checkpoint_advisories1archlinux2freebsd2mscve1nvd1cve1ubuntucve1rustsec1alpinelinux1cvelist1veracode1altlinux2fedora3gentoo1photon4ics1hp1symantec1hackerone1oracle6