crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aix 5.3 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 6.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 7.1 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Aix 7.2 Openssl_advisory21 | — | — | Dec 19, 2016 | Sep 26, 2016 |
| Alpine Linux | — | Upgrade openssl | Aug 30, 2017 | Sep 26, 2016 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 26, 2016 |
| Cisco Anyconnect | — | Upgrade to the latest version of Cisco Secure Client to resolve this vulnerability. | Dec 16, 2020 | Sep 26, 2016 |
| Debian | — | Upgrade openssl | Jul 30, 2024 | Sep 26, 2016 |
| Freebsd | — | Upgrade openssl-develUpgrade libresslUpgrade FreeBSDUpgrade libressl-develUpgrade openssl | Nov 14, 2016 | Sep 26, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Oct 30, 2017 | Sep 26, 2016 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Sep 27, 2016 | Sep 26, 2016 |
| Huawei Vrp | — | Contact Huawei TAC to request the upgrades | Apr 2, 2026 | Mar 22, 2017 |
| Ibm Aix | — | Apply the fix or workaround for openssl_advisory21 | Nov 30, 2017 | Sep 26, 2016 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.6-0.175.3.13.0.4.0 on Solaris 11.3Upgrade library/security/openssl to version 1.0.1.21-0.175.3.13.0.4.0 on Solaris 11.3 | May 29, 2017 | Sep 26, 2016 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 8.1R11.1Update Pulse Connect Secure to version 8.2R6Update Pulse Connect Secure to version 8.1R11 | Oct 28, 2020 | Sep 26, 2016 |
| Suse | — | Upgrade openssl-1_0_0-docUpgrade libopenssl1_1-hmacUpgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-dataUpgrade mozilla-nspr-32bitUpgrade libopenssl-1_1-develUpgrade mozilla-nss-toolsUpgrade libopenssl1_0_0-hmacUpgrade libopenssl10Upgrade mozilla-nssUpgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade firefox-libatk-1_0-0Upgrade nodejs4-docsUpgrade firefox-gtk3-immodule-thaiUpgrade libopenssl-1_0_0-develUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-branding-upstreamUpgrade libopenssl1_1-hmac-32bitUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade firefox-libgtk-3-0Upgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade libopenssl-develUpgrade nodejs4Upgrade libopenssl-1_1-devel-32bitUpgrade nodejs8Upgrade firefox-gdk-pixbuf-query-loadersUpgrade libfreebl3-32bitUpgrade mozilla-nss-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libopenssl1_1-32bitUpgrade libopenssl1_1Upgrade firefox-atk-langUpgrade mozilla-nss-32bitUpgrade libopenssl1_0_0-32bitUpgrade firefox-gtk3-toolsUpgrade mozilla-nss-certsUpgrade firefox-gtk3-langUpgrade npm8Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gdk-pixbuf-langUpgrade npm4Upgrade firefox-libcairo2Upgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-immodule-ximUpgrade nodejs8-develUpgrade libfreebl3Upgrade nodejs8-docsUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gobject-2_0-0Upgrade openssl-1_1Upgrade firefox-glib2-toolsUpgrade firefox-libffi7Upgrade firefox-libcairo-gobject2Upgrade mozilla-nss-certs-32bitUpgrade MozillaFirefoxUpgrade MozillaFirefox-branding-SLEDUpgrade openssl-1_0_0Upgrade nodejs4-develUpgrade opensslUpgrade openssl-docUpgrade libfirefox-gio-2_0-0Upgrade libopenssl1_0_0-hmac-32bitUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libopenssl1_0_0Upgrade firefox-gio-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade libfirefox-glib-2_0-0 | Oct 12, 2016 | Sep 26, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub