Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl3Upgrade openssl1.1-compatUpgrade openssl | Jun 11, 2020 | Apr 21, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2020 |
| Debian | — | Upgrade openssl | Apr 23, 2020 | Apr 21, 2020 |
| Freebsd | — | Upgrade opensslUpgrade FreeBSDUpgrade gitlab-ce | May 1, 2020 | May 1, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Apr 21, 2020 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 22, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111d-develUpgrade openssl111d-libsUpgrade openssl111d-staticUpgrade openssl111d | Jun 3, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade openssl-libsUpgrade opensslUpgrade openssl-perl | May 27, 2020 | Apr 21, 2020 |
| Oracle Ebs | — | Apply the apr-2021 Critical Patch Update (CPU) (Patch 32438190) for Oracle E-Business Suite | Jun 20, 2022 | Apr 21, 2020 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Jan 19, 2021 | Apr 21, 2020 |
| Oracle Solaris | — | Upgrade library/security/openssl to version 1.0.2.24-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl-11 to version 1.1.1.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.30.0.1.88.0 on Solaris 11.4 | Jan 19, 2021 | Apr 21, 2020 |
| Suse | — | Upgrade openssl-1_1Upgrade clippyUpgrade cargo1.43-docUpgrade rust-cbindgenUpgrade rust-srcUpgrade rust-docUpgrade cargoUpgrade libopenssl1_1Upgrade cargo-docUpgrade rust-analysisUpgrade rust-gdbUpgrade rustfmtUpgrade libopenssl1_1-hmacUpgrade libopenssl-1_1-develUpgrade rust1.43-docUpgrade libopenssl1_1-hmac-32bitUpgrade rust1.43Upgrade rustUpgrade rust1.43-analysisUpgrade rlsUpgrade libopenssl1_1-32bitUpgrade cargo1.43Upgrade rust1.43-gdbUpgrade rust1.43-srcUpgrade rust-std-staticUpgrade libopenssl-1_1-devel-32bitUpgrade rls1.43 | Apr 22, 2020 | Apr 21, 2020 |
| Ubuntu | — | Upgrade openssl | Nov 19, 2024 | Apr 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub