Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssl1.1-compatUpgrade opensslUpgrade openssl3 | Jun 11, 2020 | Apr 21, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2020 |
| Debian | — | Upgrade openssl | Apr 23, 2020 | Apr 21, 2020 |
| Freebsd | — | Upgrade opensslUpgrade FreeBSDUpgrade gitlab-ce | May 1, 2020 | May 1, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Apr 21, 2020 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 22, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111dUpgrade openssl111d-staticUpgrade openssl111d-develUpgrade openssl111d-libs | Jun 3, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade opensslUpgrade openssl-devel | May 27, 2020 | Apr 21, 2020 |
| Oracle Ebs | — | Apply the apr-2021 Critical Patch Update (CPU) (Patch 32438190) for Oracle E-Business Suite | Jun 20, 2022 | Apr 21, 2020 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Jan 19, 2021 | Apr 21, 2020 |
| Oracle Solaris | — | Upgrade database/mysql-57 to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.24-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl-11 to version 1.1.1.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56 to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Apr 21, 2020 |
| Suse | — | Upgrade libopenssl-1_1-develUpgrade cargoUpgrade rust-cbindgenUpgrade clippyUpgrade rust-srcUpgrade rust-docUpgrade libopenssl1_1Upgrade rustfmtUpgrade libopenssl1_1-hmacUpgrade openssl-1_1Upgrade rust-analysisUpgrade rust-gdbUpgrade cargo-docUpgrade cargo1.43-docUpgrade rust1.43-docUpgrade rust1.43Upgrade rust-std-staticUpgrade rlsUpgrade rust1.43-gdbUpgrade libopenssl1_1-32bitUpgrade libopenssl-1_1-devel-32bitUpgrade cargo1.43Upgrade rls1.43Upgrade rust1.43-srcUpgrade rust1.43-analysisUpgrade libopenssl1_1-hmac-32bitUpgrade rust | Apr 22, 2020 | Apr 21, 2020 |
| Ubuntu | — | Upgrade openssl | Nov 19, 2024 | Apr 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub