Red Hat Security Advisory

RHSA-2021:1131

openssl security update

Released 2021-04-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v. 8.1) openssl-1:1.1.1c-5.el8_1, openssl-devel-1:1.1.1c-5.el8_1, openssl-libs-1:1.1.1c-5.el8_1 +1

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476