OpenSSL: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 5.9
  CVE-2020-1971 Public exploit

  EDIPARTYNAME NULL pointer dereference

  The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  Dec 8, 2020

Revision history

1. 2026-08-20 #52

   Neue Updates aufgenommen

2. 2025-10-20 #51

   Neue Updates aufgenommen

3. 2024-11-25 #50

   Neue Updates von Oracle Linux aufgenommen

4. 2024-06-04 #49

   Neue Updates von Oracle Linux aufgenommen

5. 2024-06-03 #48

   Neue Updates aufgenommen

6. 2024-03-18 #47

   Neue Updates von Amazon aufgenommen

7. 2024-01-25 #46

   Neue Updates von Dell aufgenommen

8. 2023-12-07 #45

   Neue Updates von Oracle Linux aufgenommen

9. 2023-10-19 #44

   Neue Updates von IBM aufgenommen

10. 2023-07-18 #43

    Hitachi Produkte ergänzt.

11. 2023-07-17 #42

    Neue Updates von HITACHI aufgenommen

12. 2022-07-13 #41

    Neue Updates von Juniper aufgenommen

13. 2022-07-06 #40

    Neue Updates von ORACLE aufgenommen

14. 2022-05-22 #39

    Neue Updates von HP aufgenommen

15. 2022-04-10 #38

    Neue Updates von Oracle Linux aufgenommen

16. 2021-08-18 #37

    Neue Updates von EMC aufgenommen

17. 2021-08-11 #36

    Neue Updates von HCL aufgenommen

18. 2021-08-02 #35

    Neue Updates von HCL aufgenommen

19. 2021-07-25 #34

    Neue Updates von HP aufgenommen

20. 2021-07-14 #33

    Neue Updates von Juniper aufgenommen

21. 2021-07-06 #32

    Neue Updates von HCL aufgenommen

22. 2021-06-03 #31

    Neue Updates von ORACLE aufgenommen

23. 2021-05-20 #30

    Neue Updates von BROCADE und HITACHI aufgenommen

24. 2021-05-19 #29

    Neue Updates von XEROX aufgenommen

25. 2021-05-11 #28

    Neue Updates von Tenable aufgenommen

References

• OpenSSL Security Advisory vom 2020-12-08
  https://www.openssl.org/news/secadv/20201208.txt
• Debian Security Advisory DSA-4807 vom 2020-12-08
  https://www.debian.org/security/2020/dsa-4807
• Ubuntu Security Notice USN-4662-1 vom 2020-12-08
  https://ubuntu.com/security/notices/USN-4662-1
• SUSE Security Update SUSE-SU-2020:14560-1 vom 2020-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007950.html
• SUSE Security Update SUSE-SU-2020:3722-1 vom 2020-12-09
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007948.html
• SUSE Security Update SUSE-SU-2020:3721-1 vom 2020-12-09
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007947.html
• SUSE Security Update SUSE-SU-2020:3720-1 vom 2020-12-09
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007945.html
• FreeBSD Security Advisory FREEBSD-SA-20:33.OPENSSL vom 2020-12-10
  https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc
• SUSE Security Update SUSE-SU-2020:3732-1 vom 2020-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007953.html
• SUSE Security Update SUSE-SU-2020:3740-1 vom 2020-12-10
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007960.html
• Debian Security Advisory DLA-2493 vom 2020-12-14
  https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html
• Debian Security Advisory DLA-2492 vom 2020-12-14
  https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html
• SUSE Security Update SUSE-SU-2020:3762-1 vom 2020-12-11
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007974.html
• SUSE Security Update SUSE-SU-2020:3763-1 vom 2020-12-11
  https://lists.suse.com/pipermail/sle-security-updates/2020-December/007976.html
• Red Hat Security Advisory RHSA-2020:5422 vom 2020-12-15
  https://access.redhat.com/errata/RHSA-2020:5422
• Red Hat Security Advisory RHSA-2020:5476 vom 2020-12-15
  https://access.redhat.com/errata/RHSA-2020:5476
• Red Hat Security Advisory RHSA-2020:5566 vom 2020-12-16
  https://access.redhat.com/errata/RHSA-2020:5566
• Red Hat Security Advisory RHSA-2020:5588 vom 2020-12-16
  https://access.redhat.com/errata/RHSA-2020:5588
• Arch Linux Security Advisory ASA-202012-24 vom 2020-12-17
  https://security.archlinux.org/ASA-202012-24/generate
• Oracle Linux Security Advisory ELSA-2020-5476 vom 2020-12-17
  http://linux.oracle.com/errata/ELSA-2020-5476.html
• Oracle Linux Security Advisory ELSA-2020-5566 vom 2020-12-17
  http://linux.oracle.com/errata/ELSA-2020-5566-1.html
• Red Hat Security Advisory RHSA-2020:5623 vom 2020-12-17
  https://access.redhat.com/errata/RHSA-2020:5623
• CentOS Security Advisory CESA-2020:5566 vom 2020-12-18
  http://centos-announce.2309468.n4.nabble.com/CentOS-announce-CESA-2020-5566-Important-CentOS-7-openssl-Security-Update-tp4646080.html
• NetApp Security Advisory NTAP-20201218-0005 vom 2020-12-18
  https://security.netapp.com/advisory/ntap-20201218-0005/
• Red Hat Security Advisory RHSA-2020:5637 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5637
• Red Hat Security Advisory RHSA-2020:5639 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5639
• Red Hat Security Advisory RHSA-2020:5640 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5640
• Red Hat Security Advisory RHSA-2020:5641 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5641
• Red Hat Security Advisory RHSA-2020:5614 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5614
• Red Hat Security Advisory RHSA-2020:5642 vom 2020-12-21
  https://access.redhat.com/errata/RHSA-2020:5642
• Gentoo Linux Security Advisory GLSA-202012-13 vom 2020-12-23
  https://security.gentoo.org/glsa/202012-13
• Red Hat Security Advisory RHSA-2021:0056 vom 2021-01-11
  https://access.redhat.com/errata/RHSA-2021:0056
• SUSE Security Update SUSE-SU-2021:0068-1 vom 2021-01-11
  https://lists.suse.com/pipermail/sle-security-updates/2021-January/008167.html
• Red Hat Security Advisory RHSA-2021:0083 vom 2021-01-12
  https://access.redhat.com/errata/RHSA-2021:0083
• F5 Security Advisory K42910051 vom 2021-01-14
  https://support.f5.com/csp/article/K42910051
• Red Hat Security Advisory RHSA-2021:0146 vom 2021-01-14
  https://access.redhat.com/errata/RHSA-2021:0146
• Avaya Security Advisory
  https://downloads.avaya.com/css/P8/documents/101073396
• Red Hat Security Advisory RHSA-2021:0039 vom 2021-01-18
  https://access.redhat.com/errata/RHSA-2021:0039
• Red Hat Security Advisory RHSA-2021:0037 vom 2021-01-18
  https://access.redhat.com/errata/RHSA-2021:0038
• Red Hat Security Advisory RHSA-2021:0187 vom 2021-01-19
  https://access.redhat.com/errata/RHSA-2021:0187
• Tenable Security Advisory
  https://de.tenable.com/security/tns-2020-12
• Tenable Security Advisory
  https://de.tenable.com/security/tns-2020-13
• Red Hat Security Advisory RHSA-2021:0486 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0486
• Red Hat Security Advisory RHSA-2021:0488 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0488
• Red Hat Security Advisory RHSA-2021:0489 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0489
• Red Hat Security Advisory RHSA-2021:0491 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0491
• Red Hat Security Advisory RHSA-2021:0494 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0494
• Red Hat Security Advisory RHSA-2021:0495 vom 2021-02-11
  https://access.redhat.com/errata/RHSA-2021:0495
• Meinberg Security Advisory MBGSA-2021.01
  https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-01-meinberg-lantime-firmware-v7-00-014-und-v6-24-027.htm
• Ubuntu Security Notice USN-4745-1 vom 2021-02-23
  https://ubuntu.com/security/notices/USN-4745-1
• Red Hat Security Advisory RHSA-2020:5635 vom 2021-02-24
  https://access.redhat.com/errata/RHSA-2020:5635
• Red Hat Security Advisory RHSA-2020:5633 vom 2021-02-24
  https://access.redhat.com/errata/RHSA-2020:5633
• Red Hat Security Advisory RHSA-2021:0949 vom 2021-03-22
  https://access.redhat.com/errata/RHSA-2021:0949
• Oracle Linux Security Advisory ELSA-2021-9137 vom 2021-03-26
  https://linux.oracle.com/errata/ELSA-2021-9137.html
• Oracle Linux Security Advisory ELSA-2021-9150 vom 2021-04-01
  https://linux.oracle.com/errata/ELSA-2021-9150.html
• Oracle Linux Security Advisory ELSA-2021-9121 vom 2021-04-06
  https://linux.oracle.com/errata/ELSA-2021-9121.html
• Nessus Network Monitor Security Advisory
  https://de.tenable.com/security/tns-2021-09
• XEROX Security Advisory XRX21-009 vom 2021-05-19
  https://securitydocs.business.xerox.com/wp-content/uploads/2021/05/cert_XRX21-009_FFPSv9-S10_DvdUsb-Bulletin_May2021.pdf
• XEROX Security Advisory XRX21-008 vom 2021-05-19
  https://securitydocs.business.xerox.com/wp-content/uploads/2021/05/cert_XRX21-008_FFPSv7-S10_DvdUsb-Bulletin_May2021.pdf
• Brocade Security Advisory BSA-2020-1166 vom 2021-05-20
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1166
• Hitachi Vulnerability Information HITACHI-SEC-2021-119 vom 2021-05-21
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-119/index.html
• ORACLE OVMSA-2021-0011 vom 2021-06-03
  https://oss.oracle.com/pipermail/oraclevm-errata/2021-June/001014.html
• HCL Article KB0090473 vom 2021-07-07
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0090473
• Juniper Security Advisory JSA11206 vom 2021-07-14
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11206&cat=SIRT_1
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04141en_us
• HCL Article KB0090800 vom 2021-08-03
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0090800
• HCL Article KB0089649 vom 2021-08-12
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0089649
• Dell NetWorker Security Update
  https://www.dell.com/support/kbdoc/de-de/000189694/dsa-2021-125-dell-emc-networker-security-update-for-multiple-vulnerabilities
• Oracle Linux Security Advisory ELSA-2022-9272 vom 2022-04-08
  https://linux.oracle.com/errata/ELSA-2022-9272.html
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04309en_us&hprpt_id=ALERT_HPE_3024068&jumpid=em_pom8nu6hj_aid-520066529
• ORACLE OVMSA-2022-0018 vom 2022-07-05
  https://linux.oracle.com/errata/OVMSA-2022-0018.html
• Juniper Security Advisory JSA69715 vom 2021-07-13
  https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-OpenSSL-security-fixes
• Hitachi Vulnerability Information HITACHI-SEC-2023-126 vom 2023-07-18
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-126/index.html
• IBM Security Bulletin 7056034 vom 2023-10-19
  https://www.ibm.com/support/pages/node/7056034
• Oracle Linux Security Advisory ELSA-2023-13025 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-13025.html
• Oracle Linux Security Advisory ELSA-2023-32790 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-32790.html
• Oracle Linux Security Advisory ELSA-2023-13024 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-13024.html
• Oracle Linux Security Advisory ELSA-2023-13026 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-13026.html
• Oracle Linux Security Advisory ELSA-2023-13027 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-13027.html
• Oracle Linux Security Advisory ELSA-2023-32791 vom 2023-12-07
  https://linux.oracle.com/errata/ELSA-2023-32791.html