1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2021:0955-2

[SUSE-SU-2021:0955-2] Security update for openssl-1_1

Severity Important
CVEs 1
Info References Vulnerabilities

Security update for openssl-1_1

This update for openssl-1_1 fixes the security issue:

  • CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension but includes a signature_algorithms_cert extension, then a NULL pointer dereference will result, leading to a crash and a denial of service attack. OpenSSL TLS clients are not impacted by this issue. [bsc#1183852]
ID
SUSE-SU-2021:0955-2
Severity
important
URL
https://www.suse.com/support/update/announcement/2021/suse-su-20210955-2/
Published
2022-07-13T13:53:46
(2 years ago)
Modified
2022-07-13T13:53:46
(2 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date