Skip to content
OpenAdvisories
Medium USN-4662-1 1 CVE

openssl, openssl1.0 vulnerability

Published Dec 8, 2020 · Updated Jun 1, 2026

Ecosystem: Ubuntu

Summary

David Benjamin discovered that OpenSSL incorrectly handled comparing
certificates containing a EDIPartyName name type. A remote attacker could
possibly use this issue to cause OpenSSL to crash, resulting in a denial of
service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS openssl 1.0.2g-1ubuntu4.18
Ubuntu · 18.04 LTS 18.04:LTS openssl 1.1.1-1ubuntu2.1~18.04.7
Ubuntu · 18.04 LTS 18.04:LTS openssl1.0 1.0.2n-1ubuntu5.5
Ubuntu · 20.04 LTS 20.04:LTS openssl 1.1.1f-1ubuntu2.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-1971 Public exploit

    EDIPARTYNAME NULL pointer dereference

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2020-1971