CVE-2021-23841
- Source
- https://cve.org/CVERecord?id=CVE-2021-23841
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23841.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-23841
- Aliases
- Downstream
ALPINE (1)
ALSA (1)
BELL (1)
ECHO (1)
JLSEC (1)
MGASA (1)
OESA (1)
openSUSE (4)
RLSA (2)
SUSE (11)
- Related
- Published
- 2021-02-16T17:15:13Z
- Modified
- 2026-11-11T13:04:30Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "14.6" } ], "source": "CPE_RANGE" } ], "vendor_product": "apple:ipados" }, { "cpes": [ "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "14.6" } ], "source": "CPE_RANGE" } ], "vendor_product": "apple:iphone_os" }, { "cpes": [ "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "11.1" }, { "fixed": "11.4" } ], "source": "CPE_RANGE" } ], "vendor_product": "apple:macos" }, { "cpes": [ "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "14.1.1" } ], "source": "CPE_RANGE" } ], "vendor_product": "apple:safari" }, { "cpes": [ "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "1.0.2" }, { "fixed": "1.0.2y" }, { "introduced": "1.1.1" }, { "fixed": "1.1.1j" } ], "source": "CPE_RANGE" } ], "vendor_product": "openssl:openssl" }, { "cpes": [ "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "8.0.23" } ], "source": "CPE_RANGE" } ], "vendor_product": "oracle:mysql_enterprise_monitor" }, { "cpes": [ "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "fixed": "1.0" } ], "source": "CPE_RANGE" } ], "vendor_product": "siemens:sinec_ins" }, { "cpes": [ "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "5.13.0" }, { "last_affected": "5.17.0" } ], "source": "CPE_RANGE" } ], "vendor_product": "tenable:tenable.sc" }, { "cpes": [ "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "10.0" }, { "last_affected": "10.0" } ], "source": "CPE_STRING" } ], "vendor_product": "debian:debian_linux" }, { "cpes": [ "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*", "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "5.5.0.0.0" }, { "last_affected": "5.5.0.0.0" }, { "introduced": "5.9.0.0.0" }, { "last_affected": "5.9.0.0.0" }, { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:business_intelligence" }, { "cpes": [ "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "1.15.0" }, { "last_affected": "1.15.0" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:communications_cloud_native_core_policy" }, { "cpes": [ "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "13.4.0.0" }, { "last_affected": "13.4.0.0" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:enterprise_manager_for_storage_management" }, { "cpes": [ "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "12.4.0.0" }, { "last_affected": "12.4.0.0" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:enterprise_manager_ops_center" }, { "cpes": [ "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "21.2" }, { "last_affected": "21.2" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:essbase" }, { "cpes": [ "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "a9.4" }, { "last_affected": "a9.4" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:jd_edwards_world_security" }, { "cpes": [ "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.57" }, { "last_affected": "8.57" }, { "introduced": "8.58" }, { "last_affected": "8.58" }, { "introduced": "8.59" }, { "last_affected": "8.59" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:peoplesoft_enterprise_peopletools" }, { "cpes": [ "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "8.8" }, { "last_affected": "8.8" } ], "source": "CPE_STRING" } ], "vendor_product": "oracle:zfs_storage_appliance_kit" }, { "cpes": [ "cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*", "cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "1.0-NA" }, { "last_affected": "1.0-NA" }, { "introduced": "1.0-sp1" }, { "last_affected": "1.0-sp1" } ], "source": "CPE_STRING" } ], "vendor_product": "siemens:sinec_ins" }, { "cpes": [ "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*", "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*", "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*", "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*", "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "5.11.0" }, { "last_affected": "5.11.0" }, { "introduced": "5.11.1" }, { "last_affected": "5.11.1" }, { "introduced": "5.12.0" }, { "last_affected": "5.12.0" }, { "introduced": "5.12.1" }, { "last_affected": "5.12.1" }, { "introduced": "5.13.0" }, { "last_affected": "5.13.0" } ], "source": "CPE_STRING" } ], "vendor_product": "tenable:nessus_network_monitor" } ] }- References
-
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807
- http://seclists.org/fulldisclosure/2021/May/67
- http://seclists.org/fulldisclosure/2021/May/68
- http://seclists.org/fulldisclosure/2021/May/70
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846
- https://security.gentoo.org/glsa/202103-03
- https://security.netapp.com/advisory/ntap-20210219-0009/
- https://security.netapp.com/advisory/ntap-20210513-0002/
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://support.apple.com/kb/HT212528
- https://support.apple.com/kb/HT212529
- https://support.apple.com/kb/HT212534
- https://www.debian.org/security/2021/dsa-4855
- https://www.openssl.org/news/secadv/20210216.txt
- https://www.tenable.com/security/tns-2021-03
- https://www.tenable.com/security/tns-2021-09
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Affected packages
Git
github.com/graalvm/graalvm-ce-builds
Affected ranges
- Type
- GIT
- Repo
- https://github.com/graalvm/graalvm-ce-builds
- Events
-
IntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "19.3.5" }, { "last_affected": "19.3.5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "20.3.1.2" }, { "last_affected": "20.3.1.2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*", "range": [ { "introduced": "21.0.0.2" }, { "last_affected": "21.0.0.2" } ], "source": "CPE_STRING" } ] }
github.com/kzalewski/openssl-1.1.1
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "42797208737688127763066522181332281160",
"length": 507
},
"id": "CVE-2021-23841-17161750",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
"target": {
"file": "test/ec_internal_test.c",
"function": "setup_tests"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"230361427007416664995616424352791763469",
"68454496777232705137616949383570055801",
"174227485603324825134703660955423564225",
"306374039697804480350160125378658725435",
"223787537721903344733141597182001711142",
"305852724676774806958748002571762917320",
"61902118637910596077004663207701223681",
"278724473247779637198513168995006009135",
"150804929727413209120953746872414715465",
"166774358343717215765245239236385866693",
"116293081894868411264108492273509366961",
"326496170417124709669304286305887789679",
"278306348133167756990680493182074324125",
"189649085256091224929149730235838635518",
"82945606976757935725900546138315651129",
"136187505923069729147869676886657763243",
"233447734599456461300796481665382809870",
"116930820689846462220149337293161556595",
"153181275943870954612030432229689150702",
"65985025876624501603393736976041980125"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-3349f255",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
"target": {
"file": "crypto/bn/bn_gf2m.c"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "30673062630639656303483208802482655434",
"length": 494
},
"id": "CVE-2021-23841-4f7f516c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
"target": {
"file": "crypto/bn/bn_gf2m.c",
"function": "BN_GF2m_poly2arr"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"202560716467995180801900703314012126638",
"231076714992210239911677876085986544653",
"119476550149019858610160764241585512883",
"237713134421560846878241190267682686452",
"291912177671523663250360670212314966717",
"148718397703357758449784276736258891876",
"8308956487359903771982894414540058331",
"219665286569007368979236427780197060159"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-f19f6747",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
"target": {
"file": "test/ec_internal_test.c"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"215474658839038190857768659117172798903",
"224789752300883698945153787266757617261",
"56494159630746388130037307952134413004",
"164370382436795402003615230331141913984",
"149153318460680570484795927015804201404"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-fa870959",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
"target": {
"file": "include/openssl/opensslv.h"
}
}
]
vanir_signatures_modified
"2026-11-11T13:04:30Z"
github.com/mysql/mysql-server
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mysql/mysql-server
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "5.7.33" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*", "range": [ { "introduced": "8.0.15" }, { "fixed": "8.0.23" } ], "source": "CPE_RANGE" } ] }
Affected versions
mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.7.31
mysql-5.7.32
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"286756561296075042237231219649184368171",
"302896255058266923472696425836035569717",
"300297427993859605007554044173966498739",
"175565100923089660637647648328373853699",
"71802579880224164103266412744806334599",
"315666916814277685292192961936838231932",
"198092292660585766502869236426726266894",
"162640942130416387239939759911226756525"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-a59356ae",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mysql/mysql-server/commit/e5d189ecb9465f4be6235109dd3dbcaab01ddc53",
"target": {
"file": "include/welcome_copyright_notice.h"
}
}
]
vanir_signatures_modified
"2026-11-11T13:04:30Z"
github.com/openssl/openssl
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openssl/openssl
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "1.0.2" }, { "fixed": "1.0.2y" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "range": [ { "introduced": "1.1.1" }, { "fixed": "1.1.1j" } ], "source": "CPE_RANGE" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"28170854778703993674264004058177114599",
"73132526844288570625317440636111911761",
"177405411499435185068645597737938634778",
"224809958623850711330610094965797758930",
"295554444428855106393106961197201359586"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-c377fa22",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
"target": {
"file": "include/openssl/opensslv.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"251633914150035957322733061977107206211",
"338514574181828579838011565939158652696",
"76638288692106140328510055542557597351",
"142922657400765574308962710386922248045",
"71649992455794854055653842592139575350",
"65527166711110472566013424527579064967",
"253196866009476977787139000804413898733",
"172177136897997206866313011107384691461"
],
"threshold": 0.9
},
"id": "CVE-2021-23841-e051451f",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
"target": {
"file": "crypto/opensslv.h"
}
}
]
vanir_signatures_modified
"2026-11-11T13:04:30Z"