CA certificate check bypass with X509_V_FLAG_X509_STRICT
Priority MEDIUM 58CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-295.
Summary
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.18339 97th percentileScored 2026-11-07
Fix Fixed openssl-src (crates.io): 111.15.0Red Hat: 8 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenSSL | OpenSSL | Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j) | — | No fix listed | CNA |
| — | openssl-src (crates.io) | 111.11.0 to before 111.15.0 | 111.15.0 | Patch available | GHSA-8hfj-xrj2-pm22 |
- OpenSSL VendorOpenSSL Affected Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j) Fixed in — No fix listed CNA
- openssl-src (crates.io) Vendor— Affected 111.11.0 to before 111.15.0 Fixed in 111.15.0 Patch available GHSA-8hfj-xrj2-pm22
CPE configurations NVD · 52
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* | 1.1.1h to before 1.1.1k | Vulnerable | OpenSSL |
| cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* | 12.2 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* | 12.2 p1 | Vulnerable | FreeBSD |
| cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* | 12.2 p2 | Vulnerable | FreeBSD |
| cpe:2.3:o:netapp:santricity_smi-s_provider_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:storagegrid_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:storagegrid:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:windriver:linux:-:*:*:*:cd:*:*:* | not specified by NVD | Vulnerable | Wind River |
| cpe:2.3:o:windriver:linux:17.0:*:*:*:lts:*:*:* | 17.0 | Vulnerable | Wind River |
- cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.1.1h to before 1.1.1k Vulnerable ·OpenSSL
- cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* Versions 12.2 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* Versions 12.2 p1 Vulnerable ·FreeBSD
- cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* Versions 12.2 p2 Vulnerable ·FreeBSD
- cpe:2.3:o:netapp:santricity_smi-s_provider_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:storagegrid_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:storagegrid:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:windriver:linux:-:*:*:*:cd:*:*:* Versions not specified by NVD Vulnerable ·Wind River
- cpe:2.3:o:windriver:linux:17.0:*:*:*:lts:*:*:* Versions 17.0 Vulnerable ·Wind River
Show 42 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:windriver:linux:18.0:*:*:*:lts:*:*:* | 18.0 | Vulnerable | Wind River |
| cpe:2.3:o:windriver:linux:19.0:*:*:*:lts:*:*:* | 19.0 | Vulnerable | Wind River |
| cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | 34 | Vulnerable | Fedoraproject |
| cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* | up to 8.13.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:* | 8.2.1 – 8.2.3 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:* | 5.11.0 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:* | 5.11.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:* | 5.12.0 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:* | 5.12.1 | Vulnerable | Tenable |
| cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:* | 5.13.0 | Vulnerable | Tenable |
| cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:* | 11.3.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* | 13.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* | 19.3.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:* | 20.3.1.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:* | 21.0.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* | before 9.2.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* | a9.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:* | up to 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* | up to 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* | up to 5.7.33; 8.0.15 – 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* | up to 8.0.23 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:* | 8.57 – 8.59 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:* | before 18.1.0.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:* | 5.6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* | 12.2.1.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* | 14.1.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:* | 8.2.19 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:* | 9.2.10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:* | 10.1.1 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:* | 8.2.19 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:* | 9.2.10 | Vulnerable | McAfee |
| cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:* | 10.1.1 | Vulnerable | McAfee |
| cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:* | before 10.2.1.0-17sv | Vulnerable | SonicWall |
| cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SonicWall |
| cpe:2.3:a:sonicwall:capture_client:*:*:*:*:*:*:*:* | before 3.6.24 | Vulnerable | SonicWall |
| cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* | before 10.0.11 | Vulnerable | SonicWall |
| cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* | up to 7.0.1-r1456 | Vulnerable | SonicWall |
| cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* | 10.0.0 to before 10.24.1; 12.0.0 to before 12.22.1; 14.0.0 to before 14.16.1; 15.0.0 to before 15.14.0 | Vulnerable | NodeJS |
- cpe:2.3:o:windriver:linux:18.0:*:*:*:lts:*:*:* Versions 18.0 Vulnerable ·Wind River
- cpe:2.3:o:windriver:linux:19.0:*:*:*:lts:*:*:* Versions 19.0 Vulnerable ·Wind River
- cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* Versions 34 Vulnerable ·Fedoraproject
- cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* Versions up to 8.13.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:* Versions 8.2.1 – 8.2.3 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:* Versions 5.11.0 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:* Versions 5.11.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:* Versions 5.12.0 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:* Versions 5.12.1 Vulnerable ·Tenable
- cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:* Versions 5.13.0 Vulnerable ·Tenable
- cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:* Versions 11.3.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* Versions 13.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* Versions 19.3.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:* Versions 20.3.1.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:* Versions 21.0.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* Versions before 9.2.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* Versions a9.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* Versions up to 5.7.33; 8.0.15 – 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* Versions up to 8.0.23 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:* Versions 8.57 – 8.59 Vulnerable ·Oracle
- cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:* Versions before 18.1.0.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* Versions 14.1.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:* Versions 8.2.19 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:* Versions 9.2.10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:* Versions 10.1.1 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:* Versions 8.2.19 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:* Versions 9.2.10 Vulnerable ·McAfee
- cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:* Versions 10.1.1 Vulnerable ·McAfee
- cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:* Versions before 10.2.1.0-17sv Vulnerable ·SonicWall
- cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SonicWall
- cpe:2.3:a:sonicwall:capture_client:*:*:*:*:*:*:*:* Versions before 3.6.24 Vulnerable ·SonicWall
- cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:* Versions before 10.0.11 Vulnerable ·SonicWall
- cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:* Versions up to 7.0.1-r1456 Vulnerable ·SonicWall
- cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* Versions 10.0.0 to before 10.24.1; 12.0.0 to before 12.22.1; 14.0.0 to before 14.16.1; 15.0.0 to before 15.14.0 Vulnerable ·NodeJS
Remediation
- Fix · GHSA-8hfj-xrj2-pm22 openssl-src (crates.io) Fixed in 111.15.0 Advisory →
Red Hat 8 advisories
- RHSA-2021:1202 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 3.1 Service Pack 12 security update
- Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native-1.2.23-24.redhat_24.ep7.el7
- RHSA-2021:1203 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 3.1 Service Pack 12 security update
- Red Hat JBoss Web Server 3.1
- RHSA-2021:1200 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
- JBCS 2.4.37 SP7
Show 5 more Red Hat advisories
- RHSA-2021:1199 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Core Services Apache HTTP Server 2.4.37 SP7 security update
- Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-httpd-2.4.37-70.jbcs.el7, jbcs-httpd24-httpd-devel-2.4.37-70.jbcs.el7, jbcs-httpd24-httpd-manual-2.4.37-70.jbcs.el7 +22
- RHSA-2021:1195 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 5.4.2 Security Update
- Red Hat JBoss Web Server 5.4 for RHEL 7 Server jws5-tomcat-native-1.2.25-4.redhat_4.el7jws
- Red Hat JBoss Web Server 5.4 for RHEL 8 jws5-tomcat-native-1.2.25-4.redhat_4.el8jws
- RHSA-2021:1196 Released 2021-04-14 · Red Hat rating ImportantRed Hat JBoss Web Server 5.4.2 Security Update
- Red Hat JBoss Web Server 5
- RHSA-2021:1189 Released 2021-04-14 · Red Hat rating ImportantRed Hat Virtualization security, bug fix, and enhancement update
- Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.4.5-20210330.0.el8_3, redhat-virtualization-host-image-update-4.4.5-20210330.0.el8_3
- RHSA-2021:1024 Released 2021-03-30 · Red Hat rating Importantopenssl security update
- Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1g-15.el8_3, openssl-devel-1:1.1.1g-15.el8_3, openssl-libs-1:1.1.1g-15.el8_3 +1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
OpenSSL — FEDORA-2021-cbf14ab8f9
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2021-02413 NULL pointer deref in signature_algorithms processingPriority HIGH 68
- Advisory ·
OpenSSL — 20210325 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM
Other records, highest priority first
- TI-2021-02413 NULL pointer deref in signature_algorithms processingPriority HIGH 68
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| JBCS 2.4.37 SP7 | Fixed | RHSA-2021:1200 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2021:1024 |
| Red Hat JBoss Core Services on RHEL 7 Server | Fixed | RHSA-2021:1199 |
| Red Hat JBoss Web Server 3.1 | Fixed | RHSA-2021:1203 |
| Red Hat JBoss Web Server 3.1 for RHEL 7 | Fixed | RHSA-2021:1202 |
| Red Hat JBoss Web Server 5 | Fixed | RHSA-2021:1196 |
| Red Hat JBoss Web Server 5.4 for RHEL 7 Server | Fixed | RHSA-2021:1195 |
| Red Hat JBoss Web Server 5.4 for RHEL 8 | Fixed | RHSA-2021:1195 |
| Red Hat Virtualization 4 Hypervisor for RHEL 8 | Fixed | RHSA-2021:1189 |
Not affected: 6 products
- RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4 Hypervisor for RHEL 8
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3450
- 2026-10-03 Alias added: GHSA-8hfj-xrj2-pm22
- 2026-10-08 CISA SSVC decision points changed
References
Patch 5
Advisory 19
- https://www.openssl.org/news/secadv/20210325.txt
- 20210325 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
- [oss-security] 20210327 OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210327 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210328 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- [oss-security] 20210328 Re: OpenSSL 1.1.1 CVE-2021-3450 CA certificate check bypass with X509_V_FLAG_X509_STRICT, CVE-2021-3449 NULL pointer deref in signature_algorithms processing
- GLSA-202103-03
- FEDORA-2021-cbf14ab8f9
- https://www.tenable.com/security/tns-2021-09
- https://security.netapp.com/advisory/ntap-20210326-0006/
- https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc
- https://www.tenable.com/security/tns-2021-05
- https://kc.mcafee.com/corporate/index?page=content&id=SB10356
- https://www.tenable.com/security/tns-2021-08
- https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2021-3450
Other 6
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b
- https://security.netapp.com/advisory/ntap-20210326-0006
- https://rustsec.org/advisories/RUSTSEC-2021-0056.html
- https://lists.fedoraproject.org/archives/list/[email protected]/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP
- https://github.com/alexcrichton/openssl-src-rs
- https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b
More Openssl vulnerabilities
- TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
- TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
- TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
- TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
- TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
Sources
- CVE-2021-3450 · CVE Program
- CVE-2021-3450 · NVD
- FIRST EPSS
- GHSA-8hfj-xrj2-pm22 · GitHub Advisory Database · CC BY 4.0
- CVE-2021-3450 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences