Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade openssl1.1-compatUpgrade openssl3 | Jun 11, 2020 | Apr 21, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2020 |
| Debian | — | Upgrade openssl | Apr 23, 2020 | Apr 21, 2020 |
| Freebsd | — | Upgrade FreeBSDUpgrade gitlab-ceUpgrade openssl | May 1, 2020 | May 1, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Apr 21, 2020 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 22, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111d-libsUpgrade openssl111d-develUpgrade openssl111dUpgrade openssl111d-static | Jun 3, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade openssl-perlUpgrade opensslUpgrade openssl-libs | May 27, 2020 | Apr 21, 2020 |
| Oracle Ebs | — | Apply the apr-2021 Critical Patch Update (CPU) (Patch 32438190) for Oracle E-Business Suite | Jun 20, 2022 | Apr 21, 2020 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Jan 19, 2021 | Apr 21, 2020 |
| Oracle Solaris | — | Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.24-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl-11 to version 1.1.1.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Apr 21, 2020 |
| Suse | — | Upgrade rust-srcUpgrade libopenssl1_1Upgrade rust-docUpgrade cargo-docUpgrade cargo1.43-docUpgrade rust-gdbUpgrade cargoUpgrade libopenssl-1_1-develUpgrade rust-cbindgenUpgrade rust-analysisUpgrade clippyUpgrade openssl-1_1Upgrade rustfmtUpgrade libopenssl1_1-hmacUpgrade rls1.43Upgrade rust1.43-srcUpgrade rust-std-staticUpgrade libopenssl1_1-hmac-32bitUpgrade cargo1.43Upgrade rust1.43-gdbUpgrade rust1.43Upgrade rust1.43-analysisUpgrade libopenssl1_1-32bitUpgrade rustUpgrade libopenssl-1_1-devel-32bitUpgrade rust1.43-docUpgrade rls | Apr 22, 2020 | Apr 21, 2020 |
| Ubuntu | — | Upgrade openssl | Nov 19, 2024 | Apr 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub