CVE-2021-3450

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3450
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3450.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3450
Aliases
Downstream
Related
Published
2021-03-25T15:15:13.560Z
Modified
2026-04-16T04:36:23.484915579Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a "purpose" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named "purpose" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509VFLAGX509STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).

References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type
GIT
Repo
https://github.com/graalvm/graalvm-ce-builds
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
251e15bf41dcc0c1b4e3debdb7d01f7082734ddd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c6e4c01b14bb666c14501160ba526442b051b5a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2ada493c63db015cc41bca1021f0e567f51893c6
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "19.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "20.3.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "21.0.0.2"
        }
    ]
}
Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b79ac1111737174c1b36ab5f63275f0191c000dc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ed30a748964c009d4909cb8b4b22036ebdef239
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ed30a748964c009d4909cb8b4b22036ebdef239
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e5d189ecb9465f4be6235109dd3dbcaab01ddc53
Introduced
ca94b993454c86be248fbe180db94647488114e9
Last affected
7ed30a748964c009d4909cb8b4b22036ebdef239
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ed30a748964c009d4909cb8b4b22036ebdef239
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "a9.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.7.33"
        },
        {
            "introduced": "8.0.15"
        },
        {
            "last_affected": "8.0.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0.23"
        }
    ]
}
Type
GIT
Repo
https://github.com/nodejs/node
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e8dda76aef8c3a88c6c2e26bf1cfd2ed3a05ac9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f99ce7c1b88ff445f60e9e5575b674cb509e47f3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49a77a5a996a49e8cb728eed42e55a7c1a9eef6e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc993fb2760d01457955f5b9ff787d559ed1c34e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e43735b9a801f2cdd001fc4a2aa37fefcba23d94
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b4537c91f07fd5522cc008979f79628e1685b6b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
325e1194ce111d43b31dfdf2e2944a73411276d9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
645d4d5d593c3822e567efec47ac375cfd86b83f
Introduced
cf41627411886000429bde058a6594fb7f6d6d47
Fixed
5182a7ece0b71feeb9157f7aa348a15d53e32058
Introduced
2f45ad8060e13d5ac912335096d21526f2f9602b
Fixed
fe1c4b45a11cca4de942b855910bb7eb9a4c2485
Introduced
73aa21658dfa6a22c06451d080152b32b1f98dbe
Fixed
b34a9d7dd88b6d717448e0ff433158c845f2f309
Introduced
d683e3dda09b6b3cc6cad6fd2c106e3061a48f0d
Fixed
1a34e9c24bf6dd07ff575a8c198f93cd5e8d15b9
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "12.2-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "19.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.11.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.11.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.12.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.6"
        },
        {
            "introduced": "10.0.0"
        },
        {
            "fixed": "10.24.1"
        },
        {
            "introduced": "12.0.0"
        },
        {
            "fixed": "12.22.1"
        },
        {
            "introduced": "14.0.0"
        },
        {
            "fixed": "14.16.1"
        },
        {
            "introduced": "15.0.0"
        },
        {
            "fixed": "15.14.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
e04bd3433fd84e1861bf258ea37928d9845e6a86
Fixed
e04bd3433fd84e1861bf258ea37928d9845e6a86
Database specific 
{
    "versions": [
        {
            "introduced": "1.1.1h"
        },
        {
            "fixed": "1.1.1k"
        }
    ]
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.7.31
mysql-5.7.32
mysql-5.7.33
mysql-8.*
mysql-8.0.23
mysql-9.*
mysql-9.0.0-release
mysql-9.4.0
mysql-cluster-8.*
mysql-cluster-8.0.23
mysql-cluster-9.*
mysql-cluster-9.4.0
v0.*
v0.0.1
v0.0.2
v0.0.3
v0.0.4
v0.0.6
v0.1.0
v0.1.1
v0.1.10
v0.1.100
v0.1.101
v0.1.102
v0.1.103
v0.1.104
v0.1.11
v0.1.12
v0.1.13
v0.1.14
v0.1.15
v0.1.16
v0.1.17
v0.1.18
v0.1.19
v0.1.2
v0.1.20
v0.1.21
v0.1.22
v0.1.23
v0.1.24
v0.1.25
v0.1.26
v0.1.27
v0.1.28
v0.1.29
v0.1.3
v0.1.30
v0.1.31
v0.1.32
v0.1.33
v0.1.4
v0.1.5
v0.1.6
v0.1.7
v0.1.8
v0.1.9
v0.1.92
v0.1.93
v0.1.94
v0.1.95
v0.1.96
v0.1.97
v0.1.98
v0.1.99
v0.2.0
v0.3.0
v0.3.1
v0.3.2
v0.3.4
v0.3.5
v0.3.6
v0.3.7
v0.3.8
v0.4.0
v0.5.0
v0.5.1
v0.5.10
v0.5.2
v0.5.3
v0.5.4
v0.5.5
v0.5.5-rc1
v0.5.6
v0.5.7
v0.5.8
v0.5.9
v0.6.0
v0.6.1
v0.7.0
v0.7.2
v0.7.3
v1.*
v1.0.1
v1.0.1-release
v1.0.2
v1.0.2-release
v1.0.3
v1.0.4
v1.1.0
v1.2.0
v1.3.0
v1.4.1
v1.4.2
v1.4.3
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.2
v1.6.3
v1.6.4
v1.7.0
v1.7.1
v10.*
v10.0.0
v10.1.0
v10.10.0
v10.11.0
v10.12.0
v10.13.0
v10.14.0
v10.14.1
v10.14.2
v10.15.0
v10.15.1
v10.15.2
v10.15.3
v10.16.0
v10.16.1
v10.16.2
v10.16.3
v10.17.0
v10.18.0
v10.18.1
v10.19.0
v10.2.0
v10.2.1
v10.20.0
v10.20.1
v10.21.0
v10.22.0
v10.22.1
v10.23.0
v10.23.1
v10.23.2
v10.23.3
v10.24.0
v10.3.0
v10.4.0
v10.4.1
v10.5.0
v10.6.0
v10.7.0
v10.8.0
v10.9.0
v12.*
v12.0.0
v12.1.0
v12.10.0
v12.11.0
v12.11.1
v12.12.0
v12.13.0
v12.13.1
v12.14.0
v12.14.1
v12.15.0
v12.16.0
v12.16.1
v12.16.2
v12.16.3
v12.17.0
v12.18.0
v12.18.1
v12.18.2
v12.18.3
v12.18.4
v12.19.0
v12.19.1
v12.2.0
v12.20.0
v12.20.1
v12.20.2
v12.21.0
v12.22.0
v12.3.0
v12.3.1
v12.4.0
v12.5.0
v12.6.0
v12.7.0
v12.8.0
v12.8.1
v12.9.0
v12.9.1
v14.*
v14.0.0
v14.1.0
v14.10.0
v14.10.1
v14.11.0
v14.12.0
v14.13.0
v14.13.1
v14.14.0
v14.15.0
v14.15.1
v14.15.2
v14.15.3
v14.15.4
v14.15.5
v14.16.0
v14.2.0
v14.3.0
v14.4.0
v14.5.0
v14.6.0
v14.7.0
v14.8.0
v14.9.0
v15.*
v15.0.0
v15.0.1
v15.1.0
v15.10.0
v15.11.0
v15.12.0
v15.13.0
v15.2.0
v15.2.1
v15.3.0
v15.4.0
v15.5.0
v15.5.1
v15.6.0
v15.7.0
v15.8.0
v15.9.0
v17.*
v17.0.0
v18.*
v18.0.0
v19.*
v19.0.0
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.0
v2.2.0
v2.2.1
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4
v2.4.0
v2.5.0
v3.*
v3.0.0
v5.*
v5.0.0
v5.1.0
v5.1.1
v5.10.0
v5.10.1
v5.11.0
v5.11.1
v5.12.0
v5.2.0
v5.3.0
v5.4.0
v5.4.1
v5.5.0
v5.6.0
v5.7.0
v5.7.1
v5.8.0
v5.9.0
v5.9.1
vm-19.*
vm-19.3.2
vm-19.3.2-pre
vm-19.3.3
vm-19.3.4
vm-19.3.5
vm-20.*
vm-20.0.1
vm-20.1.0
vm-20.2.0
vm-20.3.0
vm-20.3.1
vm-20.3.1.2
vm-21.*
vm-21.0.0
vm-21.0.0.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3450.json"
vanir_signatures 
[
    {
        "source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
        "target": {
            "file": "include/openssl/opensslv.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "28170854778703993674264004058177114599",
                "73132526844288570625317440636111911761",
                "177405411499435185068645597737938634778",
                "224809958623850711330610094965797758930",
                "295554444428855106393106961197201359586"
            ]
        },
        "id": "CVE-2021-3450-c377fa22"
    }
]
vanir_signatures_modified 
"2026-04-11T17:26:05Z"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2-p1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2-p2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.13.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "8.2.1"
            },
            {
                "last_affected": "8.2.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "5.12.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "5.13.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "11.3.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.4.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "9.2.6.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "8.57"
            },
            {
                "last_affected": "8.59"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "18.1.0.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.1.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.2.19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.2.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.2.19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.2.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "10.2.1.0-17sv"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.6.24"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "10.0.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0.1-r1456"
            }
        ]
    }
]