CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).

• openssl openssl (>= 1.1.1 < 1.1.1k) • debian debian linux 9.0 • debian debian linux 10.0 • freebsd freebsd 12.2 • netapp active iq unified manager • netapp cloud volumes ontap mediator • netapp e-series performance analyzer • netapp oncommand insight • netapp oncommand workflow automation • netapp ontap select deploy administration utility • netapp santricity smi-s provider • netapp snapcenter • netapp storagegrid • tenable log correlation engine (< 6.0.9) • tenable nessus (<= 8.13.1) • tenable nessus network monitor 5.11.0 • tenable nessus network monitor 5.11.1 • tenable nessus network monitor 5.12.0 • tenable nessus network monitor 5.12.1 • tenable nessus network monitor 5.13.0 • tenable tenable.sc (>= 5.13.0 <= 5.17.0) • fedoraproject fedora 34 • mcafee web gateway 8.2.19 • mcafee web gateway 9.2.10 • mcafee web gateway 10.1.1 • mcafee web gateway cloud service 8.2.19 • mcafee web gateway cloud service 9.2.10 • mcafee web gateway cloud service 10.1.1 • checkpoint quantum security management firmware r80.40 • checkpoint quantum security management firmware r81 • checkpoint multi-domain management firmware r80.40 • checkpoint multi-domain management firmware r81 • checkpoint quantum security gateway firmware r80.40 • checkpoint quantum security gateway firmware r81 • oracle communications communications policy management 12.6.0.0.0 • oracle enterprise manager for storage management 13.4.0.0 • oracle essbase 21.2 • oracle graalvm 19.3.5 • oracle graalvm 20.3.1.2 • oracle graalvm 21.0.0.2 • oracle jd edwards enterpriseone tools (< 9.2.6.0) • oracle jd edwards world security a9.4 • oracle mysql connectors (<= 8.0.23) • oracle mysql server (<= 5.7.33) • oracle mysql server (>= 8.0.15 <= 8.0.23) • oracle mysql workbench (<= 8.0.23) • oracle peoplesoft enterprise peopletools 8.57 • oracle peoplesoft enterprise peopletools 8.58 • oracle peoplesoft enterprise peopletools 8.59 • oracle primavera unifier (>= 17.7 <= 17.12) • oracle primavera unifier 19.12 • oracle primavera unifier 20.12 • oracle primavera unifier 21.12 • oracle secure backup (< 18.1.0.1.0) • oracle secure global desktop 5.6 • oracle zfs storage appliance kit 8.8 • sonicwall sma100 firmware (>= 10.2.0.0 < 10.2.1.0-17sv) • sonicwall capture client 3.5 • sonicwall sonicos 7.0.1.0 • siemens ruggedcom rcm1224 firmware (>= 6.2) … and 75 more