OpenSSL up to 1.0.2x/1.1.1i length return value

Summaryinfo

A vulnerability classified as critical was found in OpenSSL up to 1.0.2x/1.1.1i. This affects the function EVP_CipherUpdate/EVP_EncryptUpdate/EVP_DecryptUpdate. Executing a manipulation of the argument length can lead to return value. This vulnerability is tracked as CVE-2021-23841. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as critical was found in OpenSSL up to 1.0.2x/1.1.1i (Network Encryption Software). This vulnerability affects the function EVP_CipherUpdate/EVP_EncryptUpdate/EVP_DecryptUpdate. The manipulation of the argument length with an unknown input leads to a return value vulnerability. The CWE definition for the vulnerability is CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions. As an impact it is known to affect availability.

The weakness was disclosed 02/16/2021. The advisory is available at openssl.org. This vulnerability was named CVE-2021-23841. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 02/06/2026).

The vulnerability scanner Nessus provides a plugin with the ID 211827 (Oracle Linux 9 : edk2 (ELSA-2024-12842)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.0.2y or 1.1.1j eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.openssl.org. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (211827) and CERT Bund (WID-SEC-2022-0669). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Open Source CentOS
• Open Source OpenSSL
• Debian Linux
• Amazon Linux 2
• FreeBSD Project FreeBSD OS
• Juniper JUNOS
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• Hitachi Command Suite
• Gentoo Linux
• Open Source Arch Linux
• Avaya Aura Communication Manager
• Avaya Aura Session Manager
• Avaya Aura Application Enablement Services
• Avaya Aura System Manager
• Avaya Web License Manager
• Pulse Secure Pulse Connect Secure
• HCL BigFix
• Hitachi Ops Center
• Open Source Node.js
• Meinberg LANTIME
• Tenable Security Nessus
• Netscout Arbor AED
• Netscout Arbor APS
• Netscout Arbor Sightline
• Netscout Arbor TMS
• Tenable Security Nessus Network Monitor
• HPE Fabric OS
• Hitachi Configuration Manager
• F5 BIG-IP
• Trellix ePolicy Orchestrator
• IBM Rational Build Forge
• Dell NetWorker
• SolarWinds Platform
• F5 F5OS

Productinfo

Type

• Network Encryption Software

Name

• OpenSSL

Version

• 1.0.2x
• 1.1.1
• 1.1.1a
• 1.1.1b
• 1.1.1c
• 1.1.1d
• 1.1.1e
• 1.1.1f
• 1.1.1g
• 1.1.1h
• 1.1.1i

License

• open-source

Website

• Product: https://www.openssl.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion