Lucene search
IBM4242C683C007EE5B94B25809E80B1C728A4F2E637857CE565129C26B4FD05423HistoryNov 16, 2021 - 7:52 p.m.
Security Bulletin: Multiple vulnerabilities affect IBM Rational® Application Developer for WebSphere® Software - September 2021
2021-11-1619:52:56
www.ibm.com
22
0.004 Low
EPSS
Percentile
72.0%
Summary
Vulnerabilities detected in Node.js versions before v14.16.2 affects IBM Rational® Application Developer for WebSphere® Software.
Vulnerability Details
CVEID:CVE-2021-3712
**DESCRIPTION:**OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this vulnerability to read contents of memory on the system or perform a denial of service attack.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/208073 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)
Affected Products and Versions
Rational® Application Developer for WebSphere® Software
|
9.6
—|—
Rational® Application Developer for WebSphere® Software
|
9.7
Remediation/Fixes
Available at Fix Central
Workarounds and Mitigations
None
Related
ibm
ibm
openvas
openvas
openSUSE: Security Advisory for openssl-1_0_0 (openSUSE-SU-2021:2994-1)
2021-09-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14801-1)
2021-09-23 00:00:00
OpenSSL: Read Buffer Overruns Processing ASN.1 Strings (20210824) - Linux
2021-08-25 00:00:00
photon
photon
amazon
amazon
Medium: openssl11
2021-10-04 20:17:00
Medium: openssl
2021-10-01 18:00:00
Medium: openssl
2021-10-26 23:29:00
oraclelinux
oraclelinux
openssl security update
2021-12-23 00:00:00
openssl security update
2021-12-22 00:00:00
openssl security update
2022-01-14 00:00:00
github
github
Read buffer overruns processing ASN.1 strings
2022-05-24 19:12:03
cbl_mariner
cbl_mariner
CVE-2021-3712 affecting package openssl for versions less than 1.1.1k-11
2022-04-09 06:51:56
CVE-2021-3712 affecting package openssl 1.1.1k-16
2021-09-09 15:02:55
nessus
nessus
Debian DLA-2774-1 : openssl1.0 - LTS security update
2021-10-03 00:00:00
Scientific Linux Security Update : openssl on SL7.x i686/x86_64 (2022:0064)
2022-01-13 00:00:00
EulerOS Virtualization 3.0.6.6 : openssl (EulerOS-SA-2022-1135)
2022-02-12 00:00:00
redhat
redhat
(RHSA-2021:5226) Moderate: openssl security update
2021-12-21 09:07:24
(RHSA-2022:0064) Moderate: openssl security update
2022-01-11 09:02:55
f5
f5
K19559038 : OpenSSL vulnerability CVE-2021-3712
2021-10-01 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Read in Openssl
2023-09-11 07:43:19
suse
suse
Security update for openssl-1_0_0 (important)
2021-08-24 00:00:00
Security update for openssl-1_1 (low)
2021-09-07 00:00:00
Security update for openssl-1_0_0 (low)
2021-09-14 00:00:00
rustsec
rustsec
Read buffer overruns processing ASN.1 strings
2021-08-24 12:00:00
osv
osv
openssl regression
2021-09-01 18:49:31
Moderate: openssl security update
2021-12-21 09:07:24
Read buffer overruns processing ASN.1 strings
2021-08-24 12:00:00
redhatcve
redhatcve
CVE-2021-3712
2021-08-24 15:06:37
cve
cve
CVE-2021-3712
2021-08-24 15:15:09
ubuntucve
ubuntucve
CVE-2021-3712
2021-08-24 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2021-3712
2021-08-24 00:00:00
aix
aix
There is a vulnerability in OpenSSL used by AIX.
2022-01-06 09:14:51
debian
debian
[SECURITY] [DLA 2766-1] openssl security update
2021-09-26 22:03:49
[SECURITY] [DLA 2774-1] openssl1.0 security update
2021-09-30 22:02:15
[SECURITY] [DSA 4963-1] openssl security update
2021-08-24 15:16:08
almalinux
almalinux
Moderate: openssl security update
2021-12-21 09:07:24
alpinelinux
alpinelinux
CVE-2021-3712
2021-08-24 15:15:09
prion
prion
Buffer overflow
2021-08-24 15:15:00
cloudfoundry
cloudfoundry
USN-5051-3: OpenSSL vulnerability | Cloud Foundry
2021-10-28 00:00:00
USN-5051-1: OpenSSL vulnerabilities | Cloud Foundry
2021-09-07 00:00:00
nvd
nvd
CVE-2021-3712
2021-08-24 15:15:09
rocky
rocky
openssl security update
2021-12-21 09:07:24
veracode
veracode
Denial Of Service
2021-08-25 12:41:18
Denial Of Service (DoS)
2021-08-25 04:01:42
ubuntu
ubuntu
OpenSSL vulnerability
2021-08-26 00:00:00
OpenSSL vulnerability
2021-08-26 00:00:00
OpenSSL regression
2021-09-01 00:00:00
cvelist
cvelist
CVE-2021-3712 Read buffer overruns processing ASN.1 strings
2021-08-24 00:00:00
cnvd
cnvd
openssl buffer overflow vulnerability (CNVD-2021-71263)
2021-08-26 00:00:00
debiancve
debiancve
CVE-2021-3712
2021-08-24 15:15:09
thn
thn
QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices
2021-09-01 07:11:00
mageia
mageia
Updated openssl packages fix security vulnerability
2021-09-23 07:49:29
ics
ics
Mitsubishi Electric MELSOFT GT OPC UA
2022-05-10 12:00:00
0.004 Low
EPSS
Percentile
72.0%
Related for 4242C683C007EE5B94B25809E80B1C728A4F2E637857CE565129C26B4FD05423