An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-libsUpgrade opensslUpgrade openssl-perlUpgrade openssl-devel | May 4, 2022 | Mar 25, 2021 |
| Alpine Linux | — | Upgrade openssl1.1-compatUpgrade synapseUpgrade openssl3Upgrade openssl | Jun 17, 2022 | Mar 25, 2021 |
| Amazon Linux Ami 2 | — | Upgrade openssl11-develUpgrade edk2-toolsUpgrade edk2-ovmfUpgrade edk2-tools-docUpgrade edk2-aarch64Upgrade openssl11-libsUpgrade edk2-tools-pythonUpgrade edk2-debuginfoUpgrade openssl11Upgrade openssl11-debuginfoUpgrade openssl11-static | Mar 29, 2021 | Mar 25, 2021 |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 25, 2021 |
| Centos_linux | — | Upgrade openssl-debuginfoUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-perlUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-libs-debuginfo | Mar 31, 2021 | Mar 25, 2021 |
| Check Point Gaia | — | Upgrade to supported version Check Point Gaia. | Feb 25, 2026 | Apr 10, 2021 |
| Debian | — | Upgrade openssl | Mar 29, 2021 | Mar 25, 2021 |
| Freebsd | — | Upgrade FreeBSDUpgrade node14Upgrade mysql80-serverUpgrade mariadb104-serverUpgrade node12Upgrade mysql57-serverUpgrade nodeUpgrade mariadb105-serverUpgrade mysql56-serverUpgrade mariadb103-serverUpgrade opensslUpgrade node10 | Apr 20, 2021 | Apr 20, 2021 |
| Gentoo Linux | — | Upgrade dev-libs/openssl. | Apr 1, 2021 | Mar 25, 2021 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Mar 26, 2021 | Mar 25, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade openssl111d-libsUpgrade openssl111dUpgrade openssl111d-develUpgrade openssl111d-static | Jul 19, 2021 | Mar 25, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade opensslUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-libs | Jun 28, 2021 | Mar 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssl-perlUpgrade openssl-libsUpgrade openssl | Jul 2, 2021 | Mar 25, 2021 |
| Microsoft Visual_studio | — | Update Microsoft Visual Studio 2017 to the latest version in the LTSC 15.9 version stream, or upgrade to a newer supported version of Visual Studio 2017.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.4 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.9 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.11 version stream, or upgrade to a newer supported version of Visual Studio 2019.Update Microsoft Visual Studio 2019 to the latest version in the LTSC 16.7 version stream, or upgrade to a newer supported version of Visual Studio 2019. | Jun 25, 2025 | Oct 12, 2021 |
| Oracle Mysql | — | Upgrade to MySQL version 8.0.24Upgrade to MySQL version 5.7.34 | Jun 15, 2026 | Mar 25, 2021 |
| Oracle Solaris | — | Upgrade library/security/openssl-11 to version 1.1.1.11-11.4.35.0.1.94.2 on Solaris 11.4Upgrade database/mysql-57/tests to version 5.7.34-11.4.35.0.1.94.2 on Solaris 11.4Upgrade database/mysql-57 to version 5.7.34-11.4.35.0.1.94.2 on Solaris 11.4Upgrade database/mysql-57/library to version 5.7.34-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/security/openssl/openssl-fips-140 to version 2.0.15-11.4.36.0.1.101.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.22.1-11.4.36.0.1.101.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-14 to version 14.17.0-11.4.36.0.1.101.0 on Solaris 11.4Upgrade database/mysql-57/embedded to version 5.7.34-11.4.35.0.1.94.2 on Solaris 11.4Upgrade library/security/openssl to version 1.0.2.25-11.4.36.0.1.101.0 on Solaris 11.4Upgrade runtime/nodejs to version 14.17.0-11.4.36.0.1.101.0 on Solaris 11.4Upgrade database/mysql-57/client to version 5.7.34-11.4.35.0.1.94.2 on Solaris 11.4 | Jul 21, 2021 | Mar 25, 2021 |
| Oracle_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-debugsourceUpgrade opensslUpgrade openssl-perlUpgrade openssl-static | Mar 30, 2021 | Mar 25, 2021 |
| Redhat_linux | — | Upgrade openssl-libsUpgrade openssl-perlUpgrade openssl-develUpgrade openssl-debuginfoUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl | Mar 31, 2021 | Mar 25, 2021 |
| Rocky_linux | rocky-upgrade-opensslrocky-upgrade-openssl-debuginforocky-upgrade-openssl-debugsourcerocky-upgrade-openssl-develrocky-upgrade-openssl-libsrocky-upgrade-openssl-libs-debuginforocky-upgrade-openssl-perl | Mar 12, 2024 | Mar 25, 2021 | |
| Sonicwall Email Security | — | Update SonicWall Email Security to version 10.0.11 or later | Sep 22, 2025 | Jul 16, 2021 |
| Sonicwall Email Security Appliances | — | — | Sep 4, 2025 | Jul 15, 2021 |
| Sonicwall Sonicos | — | Update SonicWall SonicOS Gen7 to version 7.0.1-R1456 or later | May 25, 2026 | Jul 16, 2021 |
| Suse | — | suse-upgrade-libopenssl-1_1-develsuse-upgrade-libopenssl-1_1-devel-32bitsuse-upgrade-libopenssl1_1suse-upgrade-libopenssl1_1-32bitsuse-upgrade-libopenssl1_1-hmacsuse-upgrade-libopenssl1_1-hmac-32bitsuse-upgrade-nodejs10suse-upgrade-nodejs10-develsuse-upgrade-nodejs10-docssuse-upgrade-nodejs12suse-upgrade-nodejs12-develsuse-upgrade-nodejs12-docssuse-upgrade-npm10suse-upgrade-npm12suse-upgrade-openssl-1_1suse-upgrade-openssl-1_1-doc | Mar 26, 2021 | Mar 25, 2021 |
| Ubuntu | ubuntu-upgrade-libssl1-1ubuntu-upgrade-postgresql-10ubuntu-upgrade-postgresql-12ubuntu-upgrade-postgresql-13 | Mar 26, 2021 | Mar 25, 2021 | |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub