Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade opensslUpgrade openssl1.1-compatUpgrade openssl3 | Jun 11, 2020 | Apr 21, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 21, 2020 |
| Debian | — | Upgrade openssl | Apr 23, 2020 | Apr 21, 2020 |
| Freebsd | — | Upgrade gitlab-ceUpgrade FreeBSDUpgrade openssl | May 1, 2020 | May 1, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 24, 2020 | Apr 21, 2020 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Apr 22, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111d-libsUpgrade openssl111d-develUpgrade openssl111d-staticUpgrade openssl111d | Jun 3, 2020 | Apr 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openssl-develUpgrade opensslUpgrade openssl-perlUpgrade openssl-libs | May 27, 2020 | Apr 21, 2020 |
| Oracle Ebs | — | Apply the apr-2021 Critical Patch Update (CPU) (Patch 32438190) for Oracle E-Business Suite | Jun 20, 2022 | Apr 21, 2020 |
| Oracle Mysql | — | Upgrade to the latest version of MySQL | Jan 19, 2021 | Apr 21, 2020 |
| Oracle Solaris | — | Upgrade database/mysql-56 to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-56/client to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-56/tests to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.24-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/security/openssl-11 to version 1.1.1.9-11.4.30.0.1.88.0 on Solaris 11.4Upgrade database/mysql-56/library to version 5.6.49-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.31-11.4.25.0.1.75.1 on Solaris 11.4 | Jan 19, 2021 | Apr 21, 2020 |
| Suse | — | Upgrade libopenssl-1_1-develUpgrade libopenssl1_1Upgrade rust-cbindgenUpgrade cargo1.43-docUpgrade rust-docUpgrade rust-srcUpgrade cargo-docUpgrade rustfmtUpgrade libopenssl1_1-hmacUpgrade cargoUpgrade openssl-1_1Upgrade rust-gdbUpgrade clippyUpgrade rust-analysisUpgrade rustUpgrade rust1.43-docUpgrade libopenssl-1_1-devel-32bitUpgrade rls1.43Upgrade rust1.43-analysisUpgrade rlsUpgrade rust1.43-gdbUpgrade rust1.43Upgrade libopenssl1_1-32bitUpgrade cargo1.43Upgrade rust1.43-srcUpgrade libopenssl1_1-hmac-32bitUpgrade rust-std-static | Apr 22, 2020 | Apr 21, 2020 |
| Ubuntu | — | Upgrade openssl | Nov 19, 2024 | Apr 21, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub