CVE-2021-3449
NULL pointer deref in signature_algorithms processing
At a glance
- Severity
- Not available
- EPSS
- EPSS 63.54 % · percentile 99 (2026-10-27)
- State
- PUBLISHED
- Published
- Updated
- Assigner
- openssl
- NVD status
- Modified
Description
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
Weaknesses (CWE)
European references
- ENISA EUVD · EUVD-2021-1628
- GCVE · GCVE-0-2021-3449
CERT-FR advisories
- CERTFR-2026-AVI-0199 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0180 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2022-AVI-216 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2022-AVI-124 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2021-AVI-952 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2021-AVI-912 — Multiples vulnérabilités dans IBM Qradar · cert.ssi.gouv.fr
- CERTFR-2021-AVI-791 — Multiples vulnérabilités dans les produits IBM · cert.ssi.gouv.fr
- CERTFR-2021-AVI-784 — Multiples vulnérabilités dans les produits Microsoft · cert.ssi.gouv.fr
- CERTFR-2021-AVI-540 — Multiples vulnérabilités dans les produits SonicWall · cert.ssi.gouv.fr
- CERTFR-2021-AVI-518 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr
- CERTFR-2021-AVI-430 — Multiples vulnérabilités dans Tenable LCE · cert.ssi.gouv.fr
- CERTFR-2021-AVI-415 — Multiples vulnérabilités dans les produits Stormshield · cert.ssi.gouv.fr
- CERTFR-2021-AVI-395 — Multiples vulnérabilités dans IBM Spectrum Control · cert.ssi.gouv.fr
- CERTFR-2021-AVI-388 — Vulnérabilité dans Stormshield Endpoint Security · cert.ssi.gouv.fr
- CERTFR-2021-AVI-374 — Multiples vulnérabilités dans Tenable Nessus · cert.ssi.gouv.fr
- CERTFR-2021-AVI-341 — Multiples vulnérabilités les produits Stormshield · cert.ssi.gouv.fr
- CERTFR-2021-AVI-318 — Multiples vulnérabilités dans Zimbra · cert.ssi.gouv.fr
- CERTFR-2021-AVI-313 — Multiples vulnérabilités dans Stormshield Management Center · cert.ssi.gouv.fr
- CERTFR-2021-AVI-296 — Multiples vulnérabilités dans Oracle MySQL · cert.ssi.gouv.fr
- CERTFR-2021-AVI-235 — Multiples vulnérabilités dans les produits Tenable · cert.ssi.gouv.fr
- CERTFR-2021-AVI-221 — Multiples vulnérabilités dans OpenSSL · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*≥ 1.1.1 < 1.1.1kcpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*< 6.0.9cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*≤ 8.13.1cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*≥ 5.13.0 ≤ 5.17.0cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:*cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:quantum_security_management_firmware:r80.40:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:quantum_security_management_firmware:r81:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:multi-domain_management_firmware:r80.40:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:multi-domain_management_firmware:r81:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:*cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*- +103 more
Affected products
| Product | Versions |
|---|---|
| OpenSSL · OpenSSL | affected Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j) |
References
- https://www.openssl.org/news/secadv/20210325.txt
- https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd
- https://www.debian.org/security/2021/dsa-4875
- http://www.openwall.com/lists/oss-security/2021/03/27/1
- http://www.openwall.com/lists/oss-security/2021/03/27/2
- http://www.openwall.com/lists/oss-security/2021/03/28/3
- http://www.openwall.com/lists/oss-security/2021/03/28/4
- https://security.gentoo.org/glsa/202103-03
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.tenable.com/security/tns-2021-10
- https://www.tenable.com/security/tns-2021-09
- https://security.netapp.com/advisory/ntap-20210513-0002/
- https://security.netapp.com/advisory/ntap-20210326-0006/
- https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc
- https://www.tenable.com/security/tns-2021-06
- https://www.tenable.com/security/tns-2021-05
- https://kc.mcafee.com/corporate/index?page=content&id=SB10356
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013
- https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://security.netapp.com/advisory/ntap-20240621-0006/
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |