You are viewing this page in an unauthorized frame window.
This is a potential security issue, you are being redirected to
https://nvd.nist.gov
An official website of the United States government
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.
Description
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for strings that have been directly constructed. Where an application requests an ASN.1 structure to be printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the application without NUL terminating the "data" field, then a read buffer overrun can occur. The same thing can also occur during name constraints processing of certificates (for example if a certificate has been directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack). It could also result in the disclosure of private memory contents (such as private keys, or sensitive plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected 1.0.2-1.0.2y).
Metrics
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to nvd@nist.gov.
OR
*cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.25
*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* versions from (including) 5.7.0 up to (including) 5.7.35
*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* versions from (including) 8.0.0 up to (including) 8.0.26
*cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* versions up to (including) 8.0.26
*cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
OR
*cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:* versions up to (excluding) 11.1.2.4.047
*cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:* versions from (including) 21.0 up to (excluding) 21.3
*cpe:2.3:a:oracle:essbase:21.3:*:*:*:*:*:*:*
*cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:* versions up to (including) 8.0.27
*cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.25
*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* versions from (incl
Changed
CPE Configuration
OR
*cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions from (including) 5.16.0 up to (including) 5.19.1
OR
*cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.0
*cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions from (including) 5.16.0 up to (including) 5.19.1
Added
CPE Configuration
OR
*cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* versions up to (excluding) 1.0.1.1
Changed
Reference Type
https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf No Types Assigned
https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf Patch, Third Party Advisory
Changed
Reference Type
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf No Types Assigned
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
Changed
Reference Type
https://www.oracle.com/security-alerts/cpujan2022.html No Types Assigned
https://www.oracle.com/security-alerts/cpujan2022.html Third Party Advisory
Changed
Reference Type
https://www.tenable.com/security/tns-2022-02 No Types Assigned
https://www.tenable.com/security/tns-2022-02 Patch, Third Party Advisory
CVE Modified by OpenSSL Software Foundation3/10/2022 12:42:59 PM
OR
*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
*cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
OR
*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
*cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
OR
*cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:* versions up to (excluding) 5.10.0
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*
*cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.
Added
CPE Configuration
OR
*cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.25
*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* versions from (including) 5.7.0 up to (including) 5.7.35
*cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:* versions from (including) 8.0.0 up to (including) 8.0.26
*cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* versions up to (including) 8.0.26
*cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
Added
CPE Configuration
OR
*cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions from (including) 5.16.0 up to (including) 5.19.1
Changed
Reference Type
https://kc.mcafee.com/corporate/index?page=content&id=SB10366 No Types Assigned
https://kc.mcafee.com/corporate/index?page=content&id=SB10366 Third Party Advisory
Changed
Reference Type
https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html No Types Assigned
https://lists.debian.org/debian-lts-announce/2021/09/msg00014.html Mailing List, Third Party Advisory
Changed
Reference Type
https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html No Types Assigned
https://lists.debian.org/debian-lts-announce/2021/09/msg00021.html Mailing List, Third Party Advisory
Changed
Reference Type
https://www.oracle.com/security-alerts/cpuoct2021.html No Types Assigned
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
Changed
Reference Type
https://www.tenable.com/security/tns-2021-16 No Types Assigned
https://www.tenable.com/security/tns-2021-16 Third Party Advisory
CVE Modified by OpenSSL Software Foundation10/22/2021 4:15:08 AM
OR
*cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
*cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*
*cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* versions from (including) 11.0 up to (including) 11.50.2
*cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
*cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*
*cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*
*cpe:2.3:a:netapp:so
Added
CPE Configuration
OR
*cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions from (including) 1.0.2 up to (excluding) 1.0.2za
*cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions from (including) 1.1.1 up to (excluding) 1.1.1l
Added
CPE Configuration
OR
*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
*cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Changed
Reference Type
http://www.openwall.com/lists/oss-security/2021/08/26/2 No Types Assigned
http://www.openwall.com/lists/oss-security/2021/08/26/2 Mailing List, Third Party Advisory
Changed
Reference Type
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=94d23fcff9b2a7a8368dfe52214d5c2569882c11 No Types Assigned
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/r18995de860f0e63635f3008fd2a6aca82394249476d21691e7c59c9e@%3Cdev.tomcat.apache.org%3E Mailing List, Third Party Advisory
Changed
Reference Type
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E No Types Assigned
https://lists.apache.org/thread.html/rad5d9f83f0d11fb3f8bb148d179b8a9ad7c6a17f18d70e5805a713d1@%3Cdev.tomcat.apache.org%3E Mailing List, Third Party Advisory
Changed
Reference Type
https://security.netapp.com/advisory/ntap-20210827-0010/ No Types Assigned
https://security.netapp.com/advisory/ntap-20210827-0010/ Third Party Advisory
Changed
Reference Type
https://www.debian.org/security/2021/dsa-4963 No Types Assigned
https://www.debian.org/security/2021/dsa-4963 Third Party Advisory
Changed
Reference Type
https://www.openssl.org/news/secadv/20210824.txt No Types Assigned
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN
CVE Modified by OpenSSL Software Foundation8/27/2021 3:15:08 AM
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
