Skip to content
OpenAdvisories
Medium ELSA-2022-0064 1 CVE

Moderate: openssl security update (Oracle Linux 7)

Published Jan 12, 2022 · Updated Jan 12, 2022

Ecosystem: Oracle Linux

Summary

[1.0.2k-23]
- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 openssl 1:1.0.2k-23.el7_9
Oracle Linux · 7 openssl-devel 1:1.0.2k-23.el7_9
Oracle Linux · 7 openssl-libs 1:1.0.2k-23.el7_9
Oracle Linux · 7 openssl-perl 1:1.0.2k-23.el7_9
Oracle Linux · 7 openssl-static 1:1.0.2k-23.el7_9

Vulnerabilities 1

  • High 7.4
    CVE-2021-3712 Public exploit EPSS 48%

    Read buffer overruns processing ASN.1 strings

    ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine crates.io