Skip to content
OpenAdvisories
Medium ELSA-2021-5226 1 CVE

Moderate: openssl security update (Oracle Linux 8)

Published Dec 22, 2021 · Updated Dec 22, 2021

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-5]
- CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005400

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 openssl 1:1.1.1k-5.el8_5
Oracle Linux · 8 openssl-devel 1:1.1.1k-5.el8_5
Oracle Linux · 8 openssl-libs 1:1.1.1k-5.el8_5
Oracle Linux · 8 openssl-perl 1:1.1.1k-5.el8_5

Vulnerabilities 1

  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io