Lucene search
GoogleOSV:RUSTSEC-2021-0055HistoryMay 01, 2021 - 12:00 p.m.
NULL pointer deref in signature_algorithms processing
2021-05-0112:00:00
Google
osv.dev
14
0.005 Low
EPSS
Percentile
76.4%
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation
ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits
the signature_algorithms extension (where it was present in the initial
ClientHello), but includes a signature_algorithms_cert extension then a NULL
pointer dereference will result, leading to a crash and a denial of service
attack.
A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which
is the default configuration). OpenSSL TLS clients are not impacted by this
issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openssl-src | lt | 111.15.0 |
Related
nessus
nessus
RHEL 8 : openssl (RHSA-2021:1063)
2021-04-05 00:00:00
EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1970)
2021-06-04 00:00:00
EulerOS 2.0 SP5 : openssl111d (EulerOS-SA-2023-2183)
2023-06-09 00:00:00
cloudfoundry
cloudfoundry
USN-4891-1: OpenSSL vulnerability | Cloud Foundry
2021-04-14 00:00:00
redhatcve
redhatcve
CVE-2021-3449
2021-03-25 14:58:10
debian
debian
[SECURITY] [DLA 2751-1] postgresql-9.6 security update
2021-08-31 14:03:14
[SECURITY] [DSA 4875-1] openssl security update
2021-03-25 15:41:28
[SECURITY] [DSA 4875-1] openssl security update
2021-03-25 15:41:28
rustsec
rustsec
NULL pointer deref in signature_algorithms processing
2021-05-01 12:00:00
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by an OpenSSL vulnerability (CVE-2021-3449)
2021-06-30 10:50:14
Security Bulletin: Potential DoS in IBM DataPower Gateway
2021-08-16 15:12:36
Security Bulletin: z/TPF is affected by an OpenSSL vulnerability
2021-04-29 15:58:54
osv
osv
openssl - security update
2021-03-25 00:00:00
CVE-2021-3449
2021-03-25 15:15:00
openssl vulnerability
2021-03-25 14:29:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0954-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for openssl1.1.1d (EulerOS-SA-2021-2225)
2021-07-19 00:00:00
Huawei EulerOS: Security Advisory for openssl111d (EulerOS-SA-2023-2183)
2023-06-09 00:00:00
githubexploit
githubexploit
Exploit for NULL Pointer Dereference in Openssl
2021-03-26 01:09:25
Exploit for NULL Pointer Dereference in Openssl
2023-09-08 10:53:39
f5
f5
K83623027 : OpenSSL vulnerability CVE-2021-3449
2021-03-26 00:00:00
suse
suse
Security update for openssl-1_1 (important)
2021-03-26 00:00:00
Security update for nodejs12 (important)
2021-07-14 00:00:00
Security update for nodejs10 (important)
2021-07-15 00:00:00
ubuntu
ubuntu
OpenSSL vulnerability
2021-03-25 00:00:00
PostgreSQL vulnerabilities
2021-08-12 00:00:00
debiancve
debiancve
CVE-2021-3449
2021-03-25 15:15:13
redhat
redhat
(RHSA-2021:1131) Important: openssl security update
2021-04-07 15:12:41
(RHSA-2021:1063) Important: openssl security update
2021-04-05 13:17:44
(RHSA-2021:1195) Important: Red Hat JBoss Web Server 5.4.2 Security Update
2021-04-14 14:22:39
openssl
openssl
Vulnerability in OpenSSL CVE-2021-3449
2021-03-25 00:00:00
cve
cve
CVE-2021-3449
2021-03-25 15:15:13
alpinelinux
alpinelinux
CVE-2021-3449
2021-03-25 15:15:13
nvd
nvd
CVE-2021-3449
2021-03-25 15:15:13
cvelist
cvelist
CVE-2021-3449 NULL pointer deref in signature_algorithms processing
2021-03-25 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to OpenSSL CVE-2021-3449
2021-04-10 23:31:27
veracode
veracode
Denial Of Service (DoS)
2021-03-25 16:28:32
github
github
openssl-src NULL pointer Dereference in signature_algorithms processing
2021-08-25 20:54:02
prion
prion
Null pointer dereference
2021-03-25 15:15:00
ics
ics
Siemens OpenSSL Vulnerabilities in Industrial Products (Update B)
2022-08-11 12:00:00
ubuntucve
ubuntucve
CVE-2021-3449
2021-03-25 00:00:00
seebug
seebug
OpenSSL 拒绝服务攻击（CVE-2021-3449）
2021-03-29 00:00:00
mscve
mscve
OpenSSL: CVE-2021-3449 NULL pointer deref in signature_algorithms processing
2021-10-12 07:00:00
mageia
mageia
Updated openssl packages fix security vulnerability
2021-04-05 18:54:07
oraclelinux
oraclelinux
openssl security update
2021-04-01 00:00:00
openssl security update
2021-03-29 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-21:07.openssl
2021-03-25 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0331
2021-03-25 00:00:00
Important Photon OS Security Update - PHSA-2021-0331
2021-03-25 00:00:00
Important Photon OS Security Update - PHSA-2021-0210
2021-03-26 00:00:00
attackerkb
attackerkb
OpenSSL TLS Server Crash (NULL pointer dereference) — CVE-2021-3449
2021-03-25 00:00:00
CVE-2021-3450
2021-03-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1k-alt1
2021-03-29 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1k-alt1
2021-03-25 00:00:00
thn
thn
OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
2021-03-26 14:56:00
fedora
fedora
[SECURITY] Fedora 34 Update: openssl-1.1.1k-1.fc34
2021-04-01 00:53:20
almalinux
almalinux
Important: openssl security update
2021-03-29 19:03:22
rocky
rocky
openssl security update
2021-03-29 19:03:22
symantec
symantec
OpenSSL Vulnerabilities Mar 2021
2021-04-07 19:44:57
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2021-03-25 00:00:00
Node.js -- April 2021 Security Releases
2021-04-06 00:00:00
archlinux
archlinux
[ASA-202103-10] openssl: multiple issues
2021-03-25 00:00:00
amazon
amazon
Important: openssl11
2021-03-25 18:31:00
cisco
cisco
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
2021-03-25 16:00:00
nodejsblog
nodejsblog
April 2021 Security Releases
2021-04-06 00:00:00
kaspersky
kaspersky
KLA12311 Multiple vulnerabilities in Microsoft Developer Tools
2021-10-12 00:00:00
gentoo
gentoo
OpenSSL: Multiple vulnerabilities
2021-03-31 00:00:00