CVE-2021-3449
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Affected (142)
Show all products
Openssl: Openssl · Debian: Debian Linux · Freebsd: Freebsd · Netapp: Active Iq Unified Manager, Cloud Volumes Ontap Mediator, E Series Performance Analyzer, Oncommand Insight, Oncommand Workflow Automation, Ontap Select Deploy Administration Utility, Santricity Smi S Provider, Snapcenter, Storagegrid · Tenable: Log Correlation Engine, Nessus, Nessus Network Monitor, Tenable.sc · Fedoraproject: Fedora · Mcafee: Web Gateway, Web Gateway Cloud Service · Checkpoint: Quantum Security Management Firmware, Multi Domain Management Firmware, Quantum Security Gateway Firmware · Oracle: Communications Communications Policy Management, Enterprise Manager For Storage Management, Essbase, Graalvm, Jd Edwards Enterpriseone Tools, Jd Edwards World Security, Mysql Connectors, Mysql Server, Mysql Workbench, Peoplesoft Enterprise Peopletools, Primavera Unifier, Secure Backup, Secure Global Desktop, Zfs Storage Appliance Kit · Sonicwall: Sma100 Firmware, Capture Client, Sonicos · Siemens: Ruggedcom Rcm1224 Firmware, Scalance Lpe9403 Firmware, Scalance M 800 Firmware, Scalance S602 Firmware, Scalance S612 Firmware, Scalance S615 Firmware, Scalance S623 Firmware, Scalance S627 2m Firmware, Scalance Sc 600 Firmware, Scalance W700 Firmware, Scalance W1700 Firmware, Scalance Xb 200 Firmware, Scalance Xc 200 Firmware, Scalance Xf 200ba Firmware, Scalance Xm 400 Firmware, Scalance Xp 200 Firmware, Scalance Xr 300wg Firmware, Scalance Xr524 8c Firmware, Scalance Xr526 8c Firmware, Scalance Xr528 6m Firmware, Scalance Xr552 12 Firmware, Simatic Cloud Connect 7 Firmware, Simatic Cp 1242 7 Gprs V2 Firmware, Simatic Hmi Basic Panels 2nd Generation Firmware, Simatic Hmi Comfort Outdoor Panels Firmware, Simatic Hmi Ktp Mobile Panels Firmware, Simatic Mv500 Firmware, Simatic Net Cp 1243 1 Firmware, Simatic Net Cp1243 7 Lte Eu Firmware, Simatic Net Cp1243 7 Lte Us Firmware, Simatic Net Cp 1243 8 Irc Firmware, Simatic Net Cp 1542sp 1 Irc Firmware, Simatic Net Cp 1543 1 Firmware, Simatic Net Cp 1543sp 1 Firmware, Simatic Net Cp 1545 1 Firmware, Simatic Pcs 7 Telecontrol Firmware, Simatic Pcs Neo Firmware, Simatic Pdm Firmware, Simatic Process Historian Opc Ua Server Firmware, Simatic Rf166c Firmware, Simatic Rf185c Firmware, Simatic Rf186c Firmware, Simatic Rf186ci Firmware, Simatic Rf188c Firmware, Simatic Rf188ci Firmware, Simatic Rf360r Firmware, Simatic S7 1200 Cpu 1211c Firmware, Simatic S7 1200 Cpu 1212c Firmware, Simatic S7 1200 Cpu 1212fc Firmware, Simatic S7 1200 Cpu 1214c Firmware, Simatic S7 1200 Cpu 1214 Fc Firmware, Simatic S7 1200 Cpu 1215 Fc Firmware, Simatic S7 1200 Cpu 1215c Firmware, Simatic S7 1200 Cpu 1217c Firmware, Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp Firmware, Sinamics Connect 300 Firmware, Tim 1531 Irc Firmware, Simatic Logon, Simatic Wincc Runtime Advanced, Simatic Wincc Telecontrol, Sinec Nms, Sinec Pni, Sinema Server, Sinumerik Opc Ua Server, Tia Administrator, Sinec Infrastructure Network Services · Nodejs: Node.js
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.0.9 | |
| Up to 8.13.1 | |
| Version 5.11.0 | |
| From 5.13.0 to 5.17.0 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 34 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.1.1 | |
| Version 10.1.1 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version r80.40 |
| Running on/with | Platform Versions |
|---|---|
Checkpoint Quantum Security Management | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version r80.40 |
| Running on/with | Platform Versions |
|---|---|
Checkpoint Multi Domain Management | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version r80.40 |
| Running on/with | Platform Versions |
|---|---|
Checkpoint Quantum Security Gateway | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 12.6.0.0.0 | |
| Version 13.4.0.0 | |
| Version 21.2 | |
| Version 19.3.5 | |
| Before 9.2.6.0 | |
| Version a9.4 | |
| Up to 8.0.23 | |
| Up to 5.7.33 | |
| Up to 8.0.23 | |
| Version 8.57 | |
| From 17.7 to 17.12 | |
| Before 18.1.0.1.0 | |
| Version 5.6 | |
| Version 8.8 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 10.2.0.0 to 10.2.1.0-17sv |
| Running on/with | Platform Versions |
|---|---|
Sonicwall Sma100 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.5 | |
| Version 7.0.1.0 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Ruggedcom Rcm1224 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Lpe9403 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance M 800 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S602 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S612 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S615 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S623 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance S627 2m | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Sc 600 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| From 6.5 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance W700 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance W1700 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xb 200 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xc 200 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xf 200ba | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.4 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xm 400 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xp 200 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 4.3 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xr 300wg | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.4 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xr524 8c | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.4 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xr526 8c | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.4 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xr528 6m | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.4 |
| Running on/with | Platform Versions |
|---|---|
Siemens Scalance Xr552 12 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Cloud Connect 7 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Cp 1242 7 Gprs V2 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Basic Panels 2nd Generation | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Comfort Outdoor Panels | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Hmi Ktp Mobile Panels | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Mv500 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1243 1 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp1243 7 Lte Eu | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp1243 7 Lte Us | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| From 3.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1243 8 Irc | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1542sp 1 Irc | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.2 to 3.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1543 1 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.1 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1543sp 1 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.0 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Net Cp 1545 1 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs 7 Telecontrol | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pcs Neo | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| From 9.1.0.7 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Pdm | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| From 2019 |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Process Historian Opc Ua Server | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf166c | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf185c | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf186c | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf186ci | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf188c | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf188ci | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic Rf360r | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1211c | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1212c | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1212fc | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1214c | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1214 Fc | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1215 Fc | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1215c | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1200 Cpu 1217c | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Simatic S7 1500 Cpu 1518 4 Pn/dp Mfp | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Siemens Sinamics Connect 300 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| From 2.0 to 2.2 |
| Running on/with | Platform Versions |
|---|---|
Siemens Tim 1531 Irc | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| From 1.6.0.2 | |
| All versions | |
| All versions | |
| Version 1.0 | |
| All versions | |
| Version 14.0 | |
| All versions | |
| All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.0.1.1 |
Related CWEs
References (58)
Source: openssl-security@openssl.org
Mailing ListThird Party Advisory
Source: openssl-security@openssl.org
Mailing ListThird Party Advisory
Source: openssl-security@openssl.org
Mailing ListThird Party Advisory
Source: openssl-security@openssl.org
Mailing ListThird Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
PatchThird Party Advisory
Source: openssl-security@openssl.org
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Mailing ListThird Party Advisory
Source: openssl-security@openssl.org
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
PatchThird Party Advisory
Source: openssl-security@openssl.org
PatchThird Party Advisory
Source: openssl-security@openssl.org
PatchThird Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: openssl-security@openssl.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.