CVE-2021-3449
Medium
Description
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
SeverityMedium
CVSS5.9
Exploit probability—
Product
Openssl
PublishedMar 25, 2021
First seenMar 25, 2021
How to fix
Update
- openssl openssl1.1.1k or later
- tenable log_correlation_engine6.0.9 or later
- oracle jd_edwards_enterpriseone_tools9.2.6.0 or later
- oracle secure_backup18.1.0.1.0 or later
- sonicwall sma100_firmware10.2.1.0-17sv or later
- siemens scalance_xb-200_firmware4.3 or later
- siemens scalance_xc-200_firmware4.3 or later
- siemens scalance_xf-200ba_firmware4.3 or later
- siemens scalance_xm-400_firmware6.4 or later
- siemens scalance_xp-200_firmware4.3 or later
- siemens scalance_xr-300wg_firmware4.3 or later
- siemens scalance_xr524-8c_firmware6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openssl openssl | 1.1.1 ≤ v < 1.1.1k | 1.1.1k |
| debian debian_linux | 9.0, 10.0 | — |
| freebsd freebsd | 12.2 | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp cloud_volumes_ontap_mediator | No range specified | — |
| netapp e-series_performance_analyzer | No range specified | — |
| netapp oncommand_insight | No range specified | — |
| netapp oncommand_workflow_automation | No range specified | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| netapp santricity_smi-s_provider | No range specified | — |
| netapp snapcenter | No range specified | — |
| netapp storagegrid | No range specified | — |
| tenable log_correlation_engine | v < 6.0.9 | 6.0.9 |
| tenable nessus | v ≤ 8.13.1 | — |
| tenable nessus_network_monitor | 5.11.0, 5.11.1, 5.12.0, 5.12.1, 5.13.0 | — |
| tenable tenable.sc | 5.13.0 ≤ v ≤ 5.17.0 | — |
| fedoraproject fedora | 34 | — |
| mcafee web_gateway | 8.2.19, 9.2.10, 10.1.1 | — |
| mcafee web_gateway_cloud_service | 8.2.19, 9.2.10, 10.1.1 | — |
| checkpoint quantum_security_management_firmware | r80.40, r81 | — |
| checkpoint multi-domain_management_firmware | r80.40, r81 | — |
| checkpoint quantum_security_gateway_firmware | r80.40, r81 | — |
| oracle communications_communications_policy_management | 12.6.0.0.0 | — |
| oracle enterprise_manager_for_storage_management | 13.4.0.0 | — |
| oracle essbase | 21.2 | — |
| oracle graalvm | 19.3.5, 20.3.1.2, 21.0.0.2 | — |
| oracle jd_edwards_enterpriseone_tools | v < 9.2.6.0 | 9.2.6.0 |
| oracle jd_edwards_world_security | a9.4 | — |
| oracle mysql_connectors | v ≤ 8.0.23 | — |
| oracle mysql_server | v ≤ 5.7.33, 8.0.15 ≤ v ≤ 8.0.23 | — |
| oracle mysql_workbench | v ≤ 8.0.23 | — |
| oracle peoplesoft_enterprise_peopletools | 8.57, 8.58, 8.59 | — |
| oracle primavera_unifier | 17.7 ≤ v ≤ 17.12, 19.12, 20.12, 21.12 | — |
| oracle secure_backup | v < 18.1.0.1.0 | 18.1.0.1.0 |
| oracle secure_global_desktop | 5.6 | — |
| oracle zfs_storage_appliance_kit | 8.8 | — |
| sonicwall sma100_firmware | 10.2.0.0 ≤ v < 10.2.1.0-17sv | 10.2.1.0-17sv |
| sonicwall capture_client | 3.5 | — |
| sonicwall sonicos | 7.0.1.0 | — |
| siemens ruggedcom_rcm1224_firmware | 6.2 ≤ v | — |
| siemens scalance_lpe9403_firmware | No range specified | — |
| siemens scalance_m-800_firmware | 6.2 ≤ v | — |
| siemens scalance_s602_firmware | 4.1 ≤ v | — |
| siemens scalance_s612_firmware | 4.1 ≤ v | — |
| siemens scalance_s615_firmware | 6.2 ≤ v | — |
| siemens scalance_s623_firmware | 4.1 ≤ v | — |
| siemens scalance_s627-2m_firmware | 4.1 ≤ v | — |
| siemens scalance_sc-600_firmware | 2.0 ≤ v | — |
| siemens scalance_w700_firmware | 6.5 ≤ v | — |
| siemens scalance_w1700_firmware | 2.0 ≤ v | — |
| siemens scalance_xb-200_firmware | v < 4.3 | 4.3 |
| siemens scalance_xc-200_firmware | v < 4.3 | 4.3 |
| siemens scalance_xf-200ba_firmware | v < 4.3 | 4.3 |
| siemens scalance_xm-400_firmware | v < 6.4 | 6.4 |
| siemens scalance_xp-200_firmware | v < 4.3 | 4.3 |
| siemens scalance_xr-300wg_firmware | v < 4.3 | 4.3 |
| siemens scalance_xr524-8c_firmware | v < 6.4 | 6.4 |
| siemens scalance_xr526-8c_firmware | v < 6.4 | 6.4 |
| siemens scalance_xr528-6m_firmware | v < 6.4 | 6.4 |
| siemens scalance_xr552-12_firmware | v < 6.4 | 6.4 |
| siemens simatic_cloud_connect_7_firmware | 1.1 ≤ v, No range specified | — |
| siemens simatic_cp_1242-7_gprs_v2_firmware | 3.1 ≤ v, No range specified | — |
| siemens simatic_hmi_basic_panels_2nd_generation_firmware | No range specified | — |
| siemens simatic_hmi_comfort_outdoor_panels_firmware | No range specified | — |
| siemens simatic_hmi_ktp_mobile_panels_firmware | No range specified | — |
| siemens simatic_mv500_firmware | No range specified | — |
| siemens simatic_net_cp_1243-1_firmware | 3.1 ≤ v | — |
| siemens simatic_net_cp1243-7_lte_eu_firmware | 3.1 ≤ v | — |
| siemens simatic_net_cp1243-7_lte_us_firmware | 3.1 ≤ v | — |
| siemens simatic_net_cp_1243-8_irc_firmware | 3.1 ≤ v | — |
| siemens simatic_net_cp_1542sp-1_irc_firmware | 2.1 ≤ v | — |
| siemens simatic_net_cp_1543-1_firmware | 2.2 ≤ v < 3.0 | 3.0 |
| siemens simatic_net_cp_1543sp-1_firmware | 2.1 ≤ v | — |
| siemens simatic_net_cp_1545-1_firmware | 1.0 ≤ v | — |
| siemens simatic_pcs_7_telecontrol_firmware | No range specified | — |
| siemens simatic_pcs_neo_firmware | No range specified | — |
| siemens simatic_pdm_firmware | 9.1.0.7 ≤ v | — |
| siemens simatic_process_historian_opc_ua_server_firmware | 2019 ≤ v | — |
| siemens simatic_rf166c_firmware | No range specified | — |
| siemens simatic_rf185c_firmware | No range specified | — |
| siemens simatic_rf186c_firmware | No range specified | — |
| siemens simatic_rf186ci_firmware | No range specified | — |
| siemens simatic_rf188c_firmware | No range specified | — |
| siemens simatic_rf188ci_firmware | No range specified | — |
| siemens simatic_rf360r_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1211c_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1212c_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1212fc_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1214_fc_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1214c_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1215_fc_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1215c_firmware | No range specified | — |
| siemens simatic_s7-1200_cpu_1217c_firmware | No range specified | — |
| siemens simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | No range specified | — |
| siemens sinamics_connect_300_firmware | No range specified | — |
| siemens tim_1531_irc_firmware | 2.0 ≤ v < 2.2 | 2.2 |
| siemens simatic_logon | 1.6.0.2 ≤ v, 1.5 | — |
| siemens simatic_wincc_runtime_advanced | No range specified | — |
| siemens simatic_wincc_telecontrol | No range specified | — |
| siemens sinec_nms | 1.0 | — |
| siemens sinec_pni | No range specified | — |
| siemens sinema_server | 14.0 | — |
| siemens sinumerik_opc_ua_server | No range specified | — |
| siemens tia_administrator | No range specified | — |
| siemens sinec_infrastructure_network_services | v < 1.0.1.1 | 1.0.1.1 |
| nodejs node.js | 10.0.0 ≤ v ≤ 10.12.0, 10.13.0 ≤ v ≤ 10.24.0, 12.0.0 ≤ v ≤ 12.12.0, 12.13.0 ≤ v < 12.22.1, 14.0.0 ≤ v ≤ 14.14.0, 14.15.0 ≤ v < 14.16.1, 15.0.0 ≤ v < 15.14.0 | 12.22.1, 14.16.1, 15.14.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.