OESA-2021-1147

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1147

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2021-1147.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2021-1147

Upstream

CVE-2021-3449

Published

2021-04-20T11:02:49Z

Modified

2025-09-03T06:17:28.726416Z

Summary

openssl security update

Details

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols.

Security Fix(es):

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension (where it was present in the initial ClientHello), but includes a signaturealgorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).(CVE-2021-3449)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / openssl

Package

Name: openssl
Purl: pkg:rpm/openEuler/openssl&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-10.oe1

Ecosystem specific

{
    "src": [
        "openssl-1.1.1f-10.oe1.src.rpm"
    ],
    "x86_64": [
        "openssl-debuginfo-1.1.1f-10.oe1.x86_64.rpm",
        "openssl-devel-1.1.1f-10.oe1.x86_64.rpm",
        "openssl-debugsource-1.1.1f-10.oe1.x86_64.rpm",
        "openssl-libs-1.1.1f-10.oe1.x86_64.rpm",
        "openssl-1.1.1f-10.oe1.x86_64.rpm"
    ],
    "noarch": [
        "openssl-help-1.1.1f-10.oe1.noarch.rpm"
    ],
    "aarch64": [
        "openssl-devel-1.1.1f-10.oe1.aarch64.rpm",
        "openssl-1.1.1f-10.oe1.aarch64.rpm",
        "openssl-libs-1.1.1f-10.oe1.aarch64.rpm",
        "openssl-debugsource-1.1.1f-10.oe1.aarch64.rpm",
        "openssl-debuginfo-1.1.1f-10.oe1.aarch64.rpm"
    ]
}