CVE-2021-3712

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3712
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3712.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3712
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (2)
CLEANSTART (3)
CLSA (4)
DEBIAN (1)
ECHO (1)
JLSEC (1)
MGASA (2)
OESA (6)
openSUSE (11)
RHSA (4)
RLSA (1)
SUSE (22)
UBUNTU (1)
Related
openSUSE (11)
SUSE (22)
Published
2021-08-24T15:15:09Z
Modified
2026-11-11T13:21:59Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "5.10.0"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "mcafee:epolicy_orchestrator"
        },
        {
            "cpes": [
                "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "11.0"
                        },
                        {
                            "last_affected": "11.50.2"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "netapp:e-series_santricity_os_controller"
        },
        {
            "cpes": [
                "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.0.2"
                        },
                        {
                            "fixed": "1.0.2za"
                        },
                        {
                            "introduced": "1.1.1"
                        },
                        {
                            "fixed": "1.1.1l"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "openssl:openssl"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "11.1.2.4.047"
                        },
                        {
                            "introduced": "21.0"
                        },
                        {
                            "fixed": "21.3"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:essbase"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "9.2.6.3"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:jd_edwards_enterpriseone_tools"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "last_affected": "8.0.27"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:mysql_connectors"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "last_affected": "8.0.25"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:mysql_enterprise_monitor"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "last_affected": "8.0.26"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:mysql_workbench"
        },
        {
            "cpes": [
                "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "1.0.1.1"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "siemens:sinec_infrastructure_network_services"
        },
        {
            "cpes": [
                "cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "6.0.0"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "tenable:nessus_network_monitor"
        },
        {
            "cpes": [
                "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "5.16.0"
                        },
                        {
                            "last_affected": "5.19.1"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "tenable:tenable.sc"
        },
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "9.0"
                        },
                        {
                            "last_affected": "9.0"
                        },
                        {
                            "introduced": "10.0"
                        },
                        {
                            "last_affected": "10.0"
                        },
                        {
                            "introduced": "11.0"
                        },
                        {
                            "last_affected": "11.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "debian:debian_linux"
        },
        {
            "cpes": [
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
                "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "5.10.0-NA"
                        },
                        {
                            "last_affected": "5.10.0-NA"
                        },
                        {
                            "introduced": "5.10.0-update_1"
                        },
                        {
                            "last_affected": "5.10.0-update_1"
                        },
                        {
                            "introduced": "5.10.0-update_10"
                        },
                        {
                            "last_affected": "5.10.0-update_10"
                        },
                        {
                            "introduced": "5.10.0-update_2"
                        },
                        {
                            "last_affected": "5.10.0-update_2"
                        },
                        {
                            "introduced": "5.10.0-update_3"
                        },
                        {
                            "last_affected": "5.10.0-update_3"
                        },
                        {
                            "introduced": "5.10.0-update_4"
                        },
                        {
                            "last_affected": "5.10.0-update_4"
                        },
                        {
                            "introduced": "5.10.0-update_5"
                        },
                        {
                            "last_affected": "5.10.0-update_5"
                        },
                        {
                            "introduced": "5.10.0-update_6"
                        },
                        {
                            "last_affected": "5.10.0-update_6"
                        },
                        {
                            "introduced": "5.10.0-update_7"
                        },
                        {
                            "last_affected": "5.10.0-update_7"
                        },
                        {
                            "introduced": "5.10.0-update_8"
                        },
                        {
                            "last_affected": "5.10.0-update_8"
                        },
                        {
                            "introduced": "5.10.0-update_9"
                        },
                        {
                            "last_affected": "5.10.0-update_9"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "mcafee:epolicy_orchestrator"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.9.0"
                        },
                        {
                            "last_affected": "1.9.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_cloud_native_core_console"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.7.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.7.0"
                        },
                        {
                            "last_affected": "1.7.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_cloud_native_core_security_edge_protection_proxy"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.15.0"
                        },
                        {
                            "last_affected": "1.15.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_cloud_native_core_unified_data_repository"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.4"
                        },
                        {
                            "last_affected": "8.4"
                        },
                        {
                            "introduced": "9.0"
                        },
                        {
                            "last_affected": "9.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_session_border_controller"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_unified_session_manager:8.2.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:communications_unified_session_manager:8.4.5:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.2.5"
                        },
                        {
                            "last_affected": "8.2.5"
                        },
                        {
                            "introduced": "8.4.5"
                        },
                        {
                            "last_affected": "8.4.5"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_unified_session_manager"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "3.2.0"
                        },
                        {
                            "last_affected": "3.2.0"
                        },
                        {
                            "introduced": "3.3.0"
                        },
                        {
                            "last_affected": "3.3.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:enterprise_communications_broker"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.4"
                        },
                        {
                            "last_affected": "8.4"
                        },
                        {
                            "introduced": "9.0"
                        },
                        {
                            "last_affected": "9.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:enterprise_session_border_controller"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "21.3"
                        },
                        {
                            "last_affected": "21.3"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:essbase"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:health_sciences_inform_publisher:6.2.1.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:health_sciences_inform_publisher:6.3.1.1:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "6.2.1.0"
                        },
                        {
                            "last_affected": "6.2.1.0"
                        },
                        {
                            "introduced": "6.3.1.1"
                        },
                        {
                            "last_affected": "6.3.1.1"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:health_sciences_inform_publisher"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "a9.4"
                        },
                        {
                            "last_affected": "a9.4"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:jd_edwards_world_security"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.57"
                        },
                        {
                            "last_affected": "8.57"
                        },
                        {
                            "introduced": "8.58"
                        },
                        {
                            "last_affected": "8.58"
                        },
                        {
                            "introduced": "8.59"
                        },
                        {
                            "last_affected": "8.59"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:peoplesoft_enterprise_peopletools"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:secure_backup:18.1.0.1.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "18.1.0.1.0"
                        },
                        {
                            "last_affected": "18.1.0.1.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:secure_backup"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.8"
                        },
                        {
                            "last_affected": "8.8"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:zfs_storage_appliance_kit"
        }
    ]
}
References

Affected packages

Git
github.com/alsyundawy/openssl-1.0.2

Affected ranges

Type
GIT
Repo
https://github.com/alsyundawy/openssl-1.0.2
Events
Introduced
c46078156d49453ba69badc9addb1e2dcd1c71f5
Fixed
c46078156d49453ba69badc9addb1e2dcd1c71f5
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2za"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3712.json"
github.com/kzalewski/openssl-1.1.1

Affected ranges

Type
GIT
Repo
https://github.com/kzalewski/openssl-1.1.1
Events
Introduced
9ad69b994ae7c73ba06d9f75efd2625102de814c
Fixed
9ad69b994ae7c73ba06d9f75efd2625102de814c
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1l"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3712.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "42797208737688127763066522181332281160",
            "length": 507
        },
        "id": "CVE-2021-3712-17161750",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "test/ec_internal_test.c",
            "function": "setup_tests"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "230361427007416664995616424352791763469",
                "68454496777232705137616949383570055801",
                "174227485603324825134703660955423564225",
                "306374039697804480350160125378658725435",
                "223787537721903344733141597182001711142",
                "305852724676774806958748002571762917320",
                "61902118637910596077004663207701223681",
                "278724473247779637198513168995006009135",
                "150804929727413209120953746872414715465",
                "166774358343717215765245239236385866693",
                "116293081894868411264108492273509366961",
                "326496170417124709669304286305887789679",
                "278306348133167756990680493182074324125",
                "189649085256091224929149730235838635518",
                "82945606976757935725900546138315651129",
                "136187505923069729147869676886657763243",
                "233447734599456461300796481665382809870",
                "116930820689846462220149337293161556595",
                "153181275943870954612030432229689150702",
                "65985025876624501603393736976041980125"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3712-3349f255",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "crypto/bn/bn_gf2m.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "30673062630639656303483208802482655434",
            "length": 494
        },
        "id": "CVE-2021-3712-4f7f516c",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "crypto/bn/bn_gf2m.c",
            "function": "BN_GF2m_poly2arr"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "202560716467995180801900703314012126638",
                "231076714992210239911677876085986544653",
                "119476550149019858610160764241585512883",
                "237713134421560846878241190267682686452",
                "291912177671523663250360670212314966717",
                "148718397703357758449784276736258891876",
                "8308956487359903771982894414540058331",
                "219665286569007368979236427780197060159"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3712-f19f6747",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "test/ec_internal_test.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "215474658839038190857768659117172798903",
                "224789752300883698945153787266757617261",
                "56494159630746388130037307952134413004",
                "164370382436795402003615230331141913984",
                "149153318460680570484795927015804201404"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3712-fa870959",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/9ad69b994ae7c73ba06d9f75efd2625102de814c",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    }
]
vanir_signatures_modified 
"2026-11-11T13:21:59Z"
github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
89713bf41c33528c3e7682d219dc838915f5af9a
Introduced
270fd3411e3d671a73ed9725940a30080f59ce6d
Last Affected
beb865a960b9a8a16cf999c323e46c5b0c67f21f
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "5.7.0"
                },
                {
                    "last_affected": "5.7.35"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.0.0"
                },
                {
                    "last_affected": "8.0.26"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.7.31
mysql-5.7.32
mysql-5.7.35
mysql-8.*
mysql-8.0.26
mysql-cluster-8.*
mysql-cluster-8.0.26

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3712.json"
github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Introduced
e818b74be2170fbe957a07b0da4401c2b694b3b8
Fixed
e818b74be2170fbe957a07b0da4401c2b694b3b8
Introduced
e04bd3433fd84e1861bf258ea37928d9845e6a86
Fixed
e04bd3433fd84e1861bf258ea37928d9845e6a86
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2za"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1l"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3712.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "28170854778703993674264004058177114599",
                "73132526844288570625317440636111911761",
                "177405411499435185068645597737938634778",
                "224809958623850711330610094965797758930",
                "295554444428855106393106961197201359586"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3712-c377fa22",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251633914150035957322733061977107206211",
                "338514574181828579838011565939158652696",
                "76638288692106140328510055542557597351",
                "142922657400765574308962710386922248045",
                "71649992455794854055653842592139575350",
                "65527166711110472566013424527579064967",
                "253196866009476977787139000804413898733",
                "172177136897997206866313011107384691461"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-3712-e051451f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
        "target": {
            "file": "crypto/opensslv.h"
        }
    }
]
vanir_signatures_modified 
"2026-11-11T13:21:59Z"