crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 6.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 7.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 7.2 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Sep 26, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 26, 2016 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | Sep 26, 2016 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Sep 26, 2016 |
| Freebsd | — | Upgrade libressl-develUpgrade opensslUpgrade openssl-develUpgrade libresslUpgrade FreeBSD | Nov 14, 2016 | Sep 26, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Sep 26, 2016 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 27, 2016 | Sep 26, 2016 |
| Huawei Vrp | — | Contact Huawei TAC to request the upgrades | Apr 2, 2026 | Mar 22, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory21 | Nov 30, 2017 | Sep 26, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.3.13.0.4.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.1.21-0.175.3.13.0.4.0 on Solaris 11.3 | May 29, 2017 | Sep 26, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.2R6Update Pulse Connect Secure to version 8.1R11.1Update Pulse Connect Secure to version 8.1R11 | Oct 28, 2020 | Sep 26, 2016 |
| Suse | — | Upgrade libopenssl1_1-32bitUpgrade libopenssl-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-32bitUpgrade libopenssl1_1Upgrade mozilla-nss-certsUpgrade libopenssl1_0_0-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-glib2-toolsUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-amharicUpgrade openssl-1_1Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade openssl-1_0_0Upgrade openssl-docUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade nodejs8Upgrade libopenssl1_0_0-hmac-32bitUpgrade mozilla-nss-certs-32bitUpgrade opensslUpgrade libopenssl-1_1-devel-32bitUpgrade nodejs4-develUpgrade firefox-atk-langUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefox-branding-SLEDUpgrade MozillaFirefoxUpgrade firefox-gtk3-toolsUpgrade npm8Upgrade firefox-libffi4Upgrade nodejs8-docsUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gobject-2_0-0Upgrade libopenssl1_0_0Upgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-langUpgrade nodejs8-develUpgrade npm4Upgrade firefox-libcairo2Upgrade firefox-libpango-1_0-0Upgrade nodejs4Upgrade libfreebl3Upgrade mozilla-nsprUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-dataUpgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade firefox-gtk3-immodule-multipressUpgrade libopenssl1_0_0-hmacUpgrade mozilla-nspr-develUpgrade firefox-libharfbuzz0Upgrade libopenssl1_1-hmac-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-translations-otherUpgrade libopenssl1_1-hmacUpgrade openssl-1_0_0-docUpgrade libsoftokn3-32bitUpgrade mozilla-nss-toolsUpgrade libopenssl10Upgrade libsoftokn3Upgrade libopenssl-1_1-develUpgrade libopenssl-1_0_0-develUpgrade firefox-gtk3-branding-upstreamUpgrade nodejs4-docs | Oct 12, 2016 | Sep 26, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub