WID-SEC-W-2022-0669
Vulnerability from csaf_certbund - Published: 2021-02-16 23:00 - Updated: 2024-11-25 23:00Es existiert eine Schwachstelle in OpenSSL, welche aufgrund einer fehlerhaften Implementierung eines Padding-Checks besteht. Dieser Padding-Check sollte Version Rollback-Angriffe erkennen und verhindern. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
FreeBSD Project FreeBSD OS
FreeBSD Project
|
cpe:/o:freebsd:freebsd:-
|
— | |
|
Hitachi Command Suite
Hitachi
|
cpe:/a:hitachi:command_suite:-
|
— | |
|
IBM Rational Build Forge <8.0.0.24
IBM / Rational Build Forge
|
<8.0.0.24 | ||
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
HCL BigFix
HCL
|
cpe:/a:hcltech:bigfix:-
|
— | |
|
Open Source OpenSSL 1.0.2
Open Source / OpenSSL
|
cpe:/a:openssl:openssl:1.0.2
|
1.0.2 | |
|
Hitachi Configuration Manager
Hitachi
|
cpe:/a:hitachi:configuration_manager:-
|
— | |
|
Trellix ePolicy Orchestrator <5.10 CU 11
Trellix / ePolicy Orchestrator
|
<5.10 CU 11 | ||
|
Tenable Security Nessus Network Monitor <5.13.1
Tenable Security / Nessus Network Monitor
|
<5.13.1 | ||
|
Juniper JUNOS
Juniper
|
cpe:/o:juniper:junos:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
SolarWinds Platform <2024.2
SolarWinds / Platform
|
<2024.2 | ||
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Pulse Secure Pulse Connect Secure
Pulse Secure
|
cpe:/a:pulsesecure:pulse_connect_secure:-
|
— | |
|
Open Source Arch Linux
Open Source
|
cpe:/o:archlinux:archlinux:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Netscout Arbor APS
Netscout
|
cpe:/a:netscout:arbor_aps:-
|
— | |
|
Netscout Arbor AED
Netscout
|
cpe:/a:netscout:arbor_aed:-
|
— | |
|
Dell NetWorker <19.10
Dell / NetWorker
|
<19.10 | ||
|
Meinberg LANTIME
Meinberg
|
cpe:/h:meinberg:lantime:-
|
— | |
|
Netscout Arbor TMS
Netscout
|
cpe:/a:netscout:arbor_tms:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— | |
|
Hitachi Ops Center
Hitachi
|
cpe:/a:hitachi:ops_center:-
|
— | |
|
Netscout Arbor Sightline
Netscout
|
cpe:/a:netscout:arbor_sightline:-
|
— | |
|
Open Source Node.js
Open Source
|
cpe:/a:nodejs:nodejs:-
|
— | |
|
HPE Fabric OS
HPE
|
cpe:/o:hpe:fabric_os:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Tenable Security Nessus Agent <8.2.3
Tenable Security / Nessus
|
Agent <8.2.3 | ||
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— |
Es existiert eine Schwachstelle in OpenSSL, welche beim Aufruf der Funktionen "EVP_CipherUpdate", "EVP_EncryptUpdate", "EVP_DecryptUpdate" auftritt. Es handelt sich um einen Überlauf-Fehler, der bei einem großen Output auftreten kann, wodurch der Wert der Output-Länge negativ wird. Dies kann zu Problemen oder Abstürzen bei der Weiterverarbeitung führen. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
FreeBSD Project FreeBSD OS
FreeBSD Project
|
cpe:/o:freebsd:freebsd:-
|
— | |
|
Hitachi Command Suite
Hitachi
|
cpe:/a:hitachi:command_suite:-
|
— | |
|
IBM Rational Build Forge <8.0.0.24
IBM / Rational Build Forge
|
<8.0.0.24 | ||
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
HCL BigFix
HCL
|
cpe:/a:hcltech:bigfix:-
|
— | |
|
Open Source OpenSSL 1.0.2
Open Source / OpenSSL
|
cpe:/a:openssl:openssl:1.0.2
|
1.0.2 | |
|
Hitachi Configuration Manager
Hitachi
|
cpe:/a:hitachi:configuration_manager:-
|
— | |
|
Trellix ePolicy Orchestrator <5.10 CU 11
Trellix / ePolicy Orchestrator
|
<5.10 CU 11 | ||
|
Tenable Security Nessus Network Monitor <5.13.1
Tenable Security / Nessus Network Monitor
|
<5.13.1 | ||
|
Juniper JUNOS
Juniper
|
cpe:/o:juniper:junos:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
SolarWinds Platform <2024.2
SolarWinds / Platform
|
<2024.2 | ||
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Pulse Secure Pulse Connect Secure
Pulse Secure
|
cpe:/a:pulsesecure:pulse_connect_secure:-
|
— | |
|
Open Source Arch Linux
Open Source
|
cpe:/o:archlinux:archlinux:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Netscout Arbor APS
Netscout
|
cpe:/a:netscout:arbor_aps:-
|
— | |
|
Netscout Arbor AED
Netscout
|
cpe:/a:netscout:arbor_aed:-
|
— | |
|
Dell NetWorker <19.10
Dell / NetWorker
|
<19.10 | ||
|
Meinberg LANTIME
Meinberg
|
cpe:/h:meinberg:lantime:-
|
— | |
|
Netscout Arbor TMS
Netscout
|
cpe:/a:netscout:arbor_tms:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— | |
|
Hitachi Ops Center
Hitachi
|
cpe:/a:hitachi:ops_center:-
|
— | |
|
Netscout Arbor Sightline
Netscout
|
cpe:/a:netscout:arbor_sightline:-
|
— | |
|
Open Source Node.js
Open Source
|
cpe:/a:nodejs:nodejs:-
|
— | |
|
HPE Fabric OS
HPE
|
cpe:/o:hpe:fabric_os:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Tenable Security Nessus Agent <8.2.3
Tenable Security / Nessus
|
Agent <8.2.3 | ||
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— |
Es existiert eine Schwachstelle in OpenSSL, welche in der "X509_issuer_and_serial_hash()" Funktion besteht. Hintergrund für die Schwachstelle ist, dass Fehler nicht richtig abgefangen werden, wenn diese beim Parsen des "Issuer"-Feldes auftreten. Als Folge tritt eine NULL-Zeiger Dereferenzierung auf. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
FreeBSD Project FreeBSD OS
FreeBSD Project
|
cpe:/o:freebsd:freebsd:-
|
— | |
|
Hitachi Command Suite
Hitachi
|
cpe:/a:hitachi:command_suite:-
|
— | |
|
IBM Rational Build Forge <8.0.0.24
IBM / Rational Build Forge
|
<8.0.0.24 | ||
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
HCL BigFix
HCL
|
cpe:/a:hcltech:bigfix:-
|
— | |
|
Open Source OpenSSL 1.0.2
Open Source / OpenSSL
|
cpe:/a:openssl:openssl:1.0.2
|
1.0.2 | |
|
Hitachi Configuration Manager
Hitachi
|
cpe:/a:hitachi:configuration_manager:-
|
— | |
|
Trellix ePolicy Orchestrator <5.10 CU 11
Trellix / ePolicy Orchestrator
|
<5.10 CU 11 | ||
|
Tenable Security Nessus Network Monitor <5.13.1
Tenable Security / Nessus Network Monitor
|
<5.13.1 | ||
|
Juniper JUNOS
Juniper
|
cpe:/o:juniper:junos:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
SolarWinds Platform <2024.2
SolarWinds / Platform
|
<2024.2 | ||
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Pulse Secure Pulse Connect Secure
Pulse Secure
|
cpe:/a:pulsesecure:pulse_connect_secure:-
|
— | |
|
Open Source Arch Linux
Open Source
|
cpe:/o:archlinux:archlinux:-
|
— | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
Netscout Arbor APS
Netscout
|
cpe:/a:netscout:arbor_aps:-
|
— | |
|
Netscout Arbor AED
Netscout
|
cpe:/a:netscout:arbor_aed:-
|
— | |
|
Dell NetWorker <19.10
Dell / NetWorker
|
<19.10 | ||
|
Meinberg LANTIME
Meinberg
|
cpe:/h:meinberg:lantime:-
|
— | |
|
Netscout Arbor TMS
Netscout
|
cpe:/a:netscout:arbor_tms:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— | |
|
Hitachi Ops Center
Hitachi
|
cpe:/a:hitachi:ops_center:-
|
— | |
|
Netscout Arbor Sightline
Netscout
|
cpe:/a:netscout:arbor_sightline:-
|
— | |
|
Open Source Node.js
Open Source
|
cpe:/a:nodejs:nodejs:-
|
— | |
|
HPE Fabric OS
HPE
|
cpe:/o:hpe:fabric_os:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Tenable Security Nessus Agent <8.2.3
Tenable Security / Nessus
|
Agent <8.2.3 | ||
|
Open Source CentOS
Open Source
|
cpe:/o:centos:centos:-
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenSSL ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herzustellen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Hardware Appliance\n- Juniper Appliance\n- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-0669 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0669.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-0669 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0669"
},
{
"category": "external",
"summary": "Arbor Answer ID 5387 vom 2021-05-04",
"url": "https://arbor.custhelp.com/app/answers/detail/a_id/5387"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:14670-1 vom 2021-03-19",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008528.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1612 vom 2021-03-20",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1612.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0939-1 vom 2021-03-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008551.html"
},
{
"category": "external",
"summary": "Nessus Network Monitor Security Advisory",
"url": "https://de.tenable.com/security/tns-2021-09"
},
{
"category": "external",
"summary": "Gentoo Linux Security Advisory GLSA-202103-03 vom 2021-03-31",
"url": "https://security.gentoo.org/glsa/202103-03"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:1168 vom 2021-04-13",
"url": "https://access.redhat.com/errata/RHSA-2021:1168"
},
{
"category": "external",
"summary": "Meinberg Security Advisory MBGSA-2021.02 vom 2021-04-20",
"url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-02-meinberg-lantime-firmware-v7-02-003-und-v6-24-028.htm"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-119 vom 2021-05-21",
"url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-119/index.html"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-117 vom 2021-05-21",
"url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-117/index.html"
},
{
"category": "external",
"summary": "Meinberg Security Advisory",
"url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2021-02-meinberg-lantime-firmware-v7-02-003-und-v6-24-028.htm"
},
{
"category": "external",
"summary": "OpenSSL Security Advisory vom 2021-02-16",
"url": "https://www.openssl.org/news/secadv/20210216.txt"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4738-1 vom 2021-02-18",
"url": "https://usn.ubuntu.com/4738-1"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2565 vom 2021-02-18",
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00025.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2563 vom 2021-02-18",
"url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00023.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-4855 vom 2021-02-18",
"url": "https://www.debian.org/security/2021/dsa-4855"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1608 vom 2021-02-20",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1608.html"
},
{
"category": "external",
"summary": "Node.js Change Log",
"url": "https://github.com/nodejs/node/releases/tag/v15.10.0"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1482 vom 2021-02-24",
"url": "https://alas.aws.amazon.com/ALAS-2021-1482.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0651-1 vom 2021-02-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-February/008392.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0649-1 vom 2021-02-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-February/008396.html"
},
{
"category": "external",
"summary": "Arch Linux Security Advisory ASA-202102-42 vom 2021-02-27",
"url": "https://security.archlinux.org/ASA-202102-42"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0673-1 vom 2021-03-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008415.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0674-1 vom 2021-03-02",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008416.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0725-1 vom 2021-03-08",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008441.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0752-1 vom 2021-03-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008457.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0754-1 vom 2021-03-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008453.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0753-1 vom 2021-03-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008447.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0755-1 vom 2021-03-09",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008459.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0769-1 vom 2021-03-12",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008473.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:0793-1 vom 2021-03-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008492.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:14667-1 vom 2021-03-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-March/008506.html"
},
{
"category": "external",
"summary": "Tenable Security Advisory TNS-2021-04 vom 2021-03-19",
"url": "https://www.cybersecurity-help.cz/vdb/SB2021031901"
},
{
"category": "external",
"summary": "Tenable Security Advisory TNS-2021-04 vom 2021-03-19 vom 2021-03-18",
"url": "https://www.tenable.com/security/tns-2021-04-0"
},
{
"category": "external",
"summary": "HCL Article KB0090473 vom 2021-07-07",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0090473"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2021-120 vom 2021-10-19",
"url": "https://downloads.avaya.com/css/P8/documents/101078217"
},
{
"category": "external",
"summary": "Pulse Secure Security Advisory SA44846 vom 2021-07-14",
"url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846/?kA23Z000000L6otSAC="
},
{
"category": "external",
"summary": "HCL Article KB0090800 vom 2021-08-03",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0090800"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:3016 vom 2021-08-06",
"url": "https://access.redhat.com/errata/RHSA-2021:3016"
},
{
"category": "external",
"summary": "HCL Article KB0089649 vom 2021-08-12",
"url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0089649"
},
{
"category": "external",
"summary": "FreeBSD Security Advisory FREEBSD-SA-21:17.OPENSSL vom 2021-08-24",
"url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-21:17.openssl.asc"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-5088-1 vom 2021-09-23",
"url": "https://ubuntu.com/security/notices/USN-5088-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-3798 vom 2021-10-13",
"url": "https://linux.oracle.com/errata/ELSA-2021-3798.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:3798 vom 2021-10-12",
"url": "https://access.redhat.com/errata/RHSA-2021:3798"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9478 vom 2021-10-13",
"url": "https://linux.oracle.com/errata/ELSA-2021-9478.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9528 vom 2021-10-29",
"url": "https://linux.oracle.com/errata/ELSA-2021-9528.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4198 vom 2021-11-09",
"url": "https://access.redhat.com/errata/RHSA-2021:4198"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4424 vom 2021-11-09",
"url": "https://access.redhat.com/errata/RHSA-2021:4424"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4613 vom 2021-11-10",
"url": "https://access.redhat.com/errata/RHSA-2021:4613"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4614 vom 2021-11-10",
"url": "https://access.redhat.com/errata/RHSA-2021:4614"
},
{
"category": "external",
"summary": "CentOS Security Advisory CESA-2021:3798 vom 2021-11-17",
"url": "https://lists.centos.org/pipermail/centos-announce/2021-November/048384.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2021-9561 vom 2021-11-23",
"url": "https://linux.oracle.com/errata/ELSA-2021-9561.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4845 vom 2021-11-29",
"url": "https://access.redhat.com/errata/RHSA-2021:4845"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:4848 vom 2021-11-29",
"url": "https://access.redhat.com/errata/RHSA-2021:4848"
},
{
"category": "external",
"summary": "HPE Security Bulletin",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04309en_us\u0026hprpt_id=ALERT_HPE_3024068\u0026jumpid=em_pom8nu6hj_aid-520066529"
},
{
"category": "external",
"summary": "Juniper Security Advisory JSA69715 vom 2021-07-13",
"url": "https://supportportal.juniper.net/s/article/2022-07-Security-Bulletin-Junos-OS-OpenSSL-security-fixes"
},
{
"category": "external",
"summary": "Brocade Security Advisory BSA-2022-1303 vom 2022-09-14",
"url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1303"
},
{
"category": "external",
"summary": "HPE SECURITY BULLETIN HPESBST04367 rev.1 vom 2022-09-21",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04367en_us"
},
{
"category": "external",
"summary": "Trellix Knowledge Center",
"url": "https://kcm.trellix.com/corporate/index?page=content\u0026id=SB10366"
},
{
"category": "external",
"summary": "Dell Knowledge Base Article",
"url": "https://www.dell.com/support/kbdoc/en-us/000221474/dsa-2024-059-security-update-for-dell-networker-multiple-components-vulnerabilities"
},
{
"category": "external",
"summary": "Hitachi Vulnerability Information HITACHI-SEC-2023-126 vom 2023-07-18",
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-126/index.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7056034 vom 2023-10-19",
"url": "https://www.ibm.com/support/pages/node/7056034"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-32791 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-32791.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-32790 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-32790.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-13026 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-13026.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-13025 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-13025.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-13027 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-13027.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2023-13024 vom 2023-12-07",
"url": "https://linux.oracle.com/errata/ELSA-2023-13024.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2024-2502 vom 2024-03-19",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2024-2502.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-20865 vom 2024-04-25",
"url": "https://linux.oracle.com/errata/ELSA-2024-20865.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12343 vom 2024-04-25",
"url": "https://linux.oracle.com/errata/ELSA-2024-12343.html"
},
{
"category": "external",
"summary": "SolarWinds Platform 2024.2 release notes vom 2024-06-04",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12409 vom 2024-06-04",
"url": "https://linux.oracle.com/errata/ELSA-2024-12409.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12408 vom 2024-06-05",
"url": "https://linux.oracle.com/errata/ELSA-2024-12408.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-23120 vom 2024-06-04",
"url": "https://linux.oracle.com/errata/ELSA-2024-23120.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7018-1 vom 2024-09-18",
"url": "https://ubuntu.com/security/notices/USN-7018-1"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2024-12842 vom 2024-11-25",
"url": "https://linux.oracle.com/errata/ELSA-2024-12842.html"
}
],
"source_lang": "en-US",
"title": "OpenSSL: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2024-11-25T23:00:00.000+00:00",
"generator": {
"date": "2024-11-26T09:24:58.471+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.8"
}
},
"id": "WID-SEC-W-2022-0669",
"initial_release_date": "2021-02-16T23:00:00.000+00:00",
"revision_history": [
{
"date": "2021-02-16T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2021-02-18T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Ubuntu und Debian aufgenommen"
},
{
"date": "2021-02-21T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2021-02-23T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2021-02-24T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2021-02-28T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE und Arch Linux aufgenommen"
},
{
"date": "2021-03-02T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-08T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-09T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-11T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-16T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-17T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-18T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Tenable aufgenommen"
},
{
"date": "2021-03-21T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE und Amazon aufgenommen"
},
{
"date": "2021-03-24T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-03-31T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Gentoo aufgenommen"
},
{
"date": "2021-04-12T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-04-19T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Meinberg aufgenommen"
},
{
"date": "2021-04-20T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2021-05-09T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Informationen von Netscout aufgenommen"
},
{
"date": "2021-05-11T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Tenable aufgenommen"
},
{
"date": "2021-05-20T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von HITACHI aufgenommen"
},
{
"date": "2021-07-06T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2021-07-14T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Pulse Secure aufgenommen"
},
{
"date": "2021-08-02T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2021-08-05T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-08-11T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von HCL aufgenommen"
},
{
"date": "2021-08-24T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von FreeBSD aufgenommen"
},
{
"date": "2021-09-23T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2021-10-12T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
},
{
"date": "2021-10-13T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2021-10-20T22:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2021-10-31T23:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2021-11-09T23:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-11-10T23:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2021-11-17T23:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von CentOS aufgenommen"
},
{
"date": "2021-11-22T23:00:00.000+00:00",
"number": "37",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2021-11-29T23:00:00.000+00:00",
"number": "38",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2022-05-22T22:00:00.000+00:00",
"number": "39",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2022-07-13T22:00:00.000+00:00",
"number": "40",
"summary": "Neue Updates von Juniper aufgenommen"
},
{
"date": "2022-09-13T22:00:00.000+00:00",
"number": "41",
"summary": "Neue Updates von BROCADE aufgenommen"
},
{
"date": "2022-09-20T22:00:00.000+00:00",
"number": "42",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2022-10-30T23:00:00.000+00:00",
"number": "43",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2023-07-17T22:00:00.000+00:00",
"number": "44",
"summary": "Neue Updates von HITACHI aufgenommen"
},
{
"date": "2023-07-18T22:00:00.000+00:00",
"number": "45",
"summary": "Hitachi Produkte erg\u00e4nzt."
},
{
"date": "2023-10-19T22:00:00.000+00:00",
"number": "46",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2023-12-07T23:00:00.000+00:00",
"number": "47",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-01-25T23:00:00.000+00:00",
"number": "48",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2024-03-18T23:00:00.000+00:00",
"number": "49",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2024-04-24T22:00:00.000+00:00",
"number": "50",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-06-03T22:00:00.000+00:00",
"number": "51",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2024-06-04T22:00:00.000+00:00",
"number": "52",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2024-09-17T22:00:00.000+00:00",
"number": "53",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2024-11-25T23:00:00.000+00:00",
"number": "54",
"summary": "Neue Updates von Oracle Linux aufgenommen"
}
],
"status": "final",
"version": "54"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Avaya Aura Application Enablement Services",
"product": {
"name": "Avaya Aura Application Enablement Services",
"product_id": "T015516",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Communication Manager",
"product": {
"name": "Avaya Aura Communication Manager",
"product_id": "T015126",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:communication_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Web License Manager",
"product": {
"name": "Avaya Web License Manager",
"product_id": "T016243",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:web_license_manager:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c19.10",
"product": {
"name": "Dell NetWorker \u003c19.10",
"product_id": "T032354"
}
},
{
"category": "product_version",
"name": "19.1",
"product": {
"name": "Dell NetWorker 19.10",
"product_id": "T032354-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.10"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "FreeBSD Project FreeBSD OS",
"product": {
"name": "FreeBSD Project FreeBSD OS",
"product_id": "4035",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:-"
}
}
}
],
"category": "vendor",
"name": "FreeBSD Project"
},
{
"branches": [
{
"category": "product_name",
"name": "Gentoo Linux",
"product": {
"name": "Gentoo Linux",
"product_id": "T012167",
"product_identification_helper": {
"cpe": "cpe:/o:gentoo:linux:-"
}
}
}
],
"category": "vendor",
"name": "Gentoo"
},
{
"branches": [
{
"category": "product_name",
"name": "HCL BigFix",
"product": {
"name": "HCL BigFix",
"product_id": "T017494",
"product_identification_helper": {
"cpe": "cpe:/a:hcltech:bigfix:-"
}
}
}
],
"category": "vendor",
"name": "HCL"
},
{
"branches": [
{
"category": "product_name",
"name": "HPE Fabric OS",
"product": {
"name": "HPE Fabric OS",
"product_id": "T019403",
"product_identification_helper": {
"cpe": "cpe:/o:hpe:fabric_os:-"
}
}
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"category": "product_name",
"name": "Hitachi Command Suite",
"product": {
"name": "Hitachi Command Suite",
"product_id": "T010951",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:command_suite:-"
}
}
},
{
"category": "product_name",
"name": "Hitachi Configuration Manager",
"product": {
"name": "Hitachi Configuration Manager",
"product_id": "T020304",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:configuration_manager:-"
}
}
},
{
"category": "product_name",
"name": "Hitachi Ops Center",
"product": {
"name": "Hitachi Ops Center",
"product_id": "T017562",
"product_identification_helper": {
"cpe": "cpe:/a:hitachi:ops_center:-"
}
}
}
],
"category": "vendor",
"name": "Hitachi"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.0.0.24",
"product": {
"name": "IBM Rational Build Forge \u003c8.0.0.24",
"product_id": "T030689"
}
},
{
"category": "product_version",
"name": "8.0.0.24",
"product": {
"name": "IBM Rational Build Forge 8.0.0.24",
"product_id": "T030689-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:rational_build_forge:8.0.0.24"
}
}
}
],
"category": "product_name",
"name": "Rational Build Forge"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Juniper JUNOS",
"product": {
"name": "Juniper JUNOS",
"product_id": "5930",
"product_identification_helper": {
"cpe": "cpe:/o:juniper:junos:-"
}
}
}
],
"category": "vendor",
"name": "Juniper"
},
{
"branches": [
{
"category": "product_name",
"name": "Meinberg LANTIME",
"product": {
"name": "Meinberg LANTIME",
"product_id": "T018353",
"product_identification_helper": {
"cpe": "cpe:/h:meinberg:lantime:-"
}
}
}
],
"category": "vendor",
"name": "Meinberg"
},
{
"branches": [
{
"category": "product_name",
"name": "Netscout Arbor AED",
"product": {
"name": "Netscout Arbor AED",
"product_id": "T019264",
"product_identification_helper": {
"cpe": "cpe:/a:netscout:arbor_aed:-"
}
}
},
{
"category": "product_name",
"name": "Netscout Arbor APS",
"product": {
"name": "Netscout Arbor APS",
"product_id": "T019265",
"product_identification_helper": {
"cpe": "cpe:/a:netscout:arbor_aps:-"
}
}
},
{
"category": "product_name",
"name": "Netscout Arbor Sightline",
"product": {
"name": "Netscout Arbor Sightline",
"product_id": "T019266",
"product_identification_helper": {
"cpe": "cpe:/a:netscout:arbor_sightline:-"
}
}
},
{
"category": "product_name",
"name": "Netscout Arbor TMS",
"product": {
"name": "Netscout Arbor TMS",
"product_id": "T019267",
"product_identification_helper": {
"cpe": "cpe:/a:netscout:arbor_tms:-"
}
}
}
],
"category": "vendor",
"name": "Netscout"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Arch Linux",
"product": {
"name": "Open Source Arch Linux",
"product_id": "T013312",
"product_identification_helper": {
"cpe": "cpe:/o:archlinux:archlinux:-"
}
}
},
{
"category": "product_name",
"name": "Open Source CentOS",
"product": {
"name": "Open Source CentOS",
"product_id": "1727",
"product_identification_helper": {
"cpe": "cpe:/o:centos:centos:-"
}
}
},
{
"category": "product_name",
"name": "Open Source Node.js",
"product": {
"name": "Open Source Node.js",
"product_id": "T017684",
"product_identification_helper": {
"cpe": "cpe:/a:nodejs:nodejs:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "1.0.2",
"product": {
"name": "Open Source OpenSSL 1.0.2",
"product_id": "228243",
"product_identification_helper": {
"cpe": "cpe:/a:openssl:openssl:1.0.2"
}
}
}
],
"category": "product_name",
"name": "OpenSSL"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Pulse Secure Pulse Connect Secure",
"product": {
"name": "Pulse Secure Pulse Connect Secure",
"product_id": "T016869",
"product_identification_helper": {
"cpe": "cpe:/a:pulsesecure:pulse_connect_secure:-"
}
}
}
],
"category": "vendor",
"name": "Pulse Secure"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2024.2",
"product": {
"name": "SolarWinds Platform \u003c2024.2",
"product_id": "T035149"
}
},
{
"category": "product_version",
"name": "2024.2",
"product": {
"name": "SolarWinds Platform 2024.2",
"product_id": "T035149-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:solarwinds:orion_platform:2024.2"
}
}
}
],
"category": "product_name",
"name": "Platform"
}
],
"category": "vendor",
"name": "SolarWinds"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Agent \u003c8.2.3",
"product": {
"name": "Tenable Security Nessus Agent \u003c8.2.3",
"product_id": "T018659"
}
},
{
"category": "product_version",
"name": "Agent 8.2.3",
"product": {
"name": "Tenable Security Nessus Agent 8.2.3",
"product_id": "T018659-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:tenable:nessus:agent__8.2.3"
}
}
}
],
"category": "product_name",
"name": "Nessus"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c5.13.1",
"product": {
"name": "Tenable Security Nessus Network Monitor \u003c5.13.1",
"product_id": "T019318"
}
},
{
"category": "product_version",
"name": "5.13.1",
"product": {
"name": "Tenable Security Nessus Network Monitor 5.13.1",
"product_id": "T019318-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:tenable:nessus_network_monitor:5.13.1"
}
}
}
],
"category": "product_name",
"name": "Nessus Network Monitor"
}
],
"category": "vendor",
"name": "Tenable Security"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c5.10 CU 11",
"product": {
"name": "Trellix ePolicy Orchestrator \u003c5.10 CU 11",
"product_id": "T024888"
}
},
{
"category": "product_version",
"name": "5.10 CU 11",
"product": {
"name": "Trellix ePolicy Orchestrator 5.10 CU 11",
"product_id": "T024888-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:trellix:epolicy_orchestrator:5.10_update_14"
}
}
}
],
"category": "product_name",
"name": "ePolicy Orchestrator"
}
],
"category": "vendor",
"name": "Trellix"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-23839",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in OpenSSL, welche aufgrund einer fehlerhaften Implementierung eines Padding-Checks besteht. Dieser Padding-Check sollte Version Rollback-Angriffe erkennen und verhindern. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um Sicherheitsvorkehrungen zu umgehen."
}
],
"product_status": {
"known_affected": [
"67646",
"4035",
"T010951",
"T030689",
"T015127",
"T015126",
"T004914",
"T017494",
"228243",
"T020304",
"T024888",
"T019318",
"5930",
"398363",
"T015518",
"T035149",
"T015516",
"T016869",
"T013312",
"T012167",
"T019265",
"T019264",
"T032354",
"T018353",
"T019267",
"T016243",
"T017562",
"T019266",
"T017684",
"T019403",
"2951",
"T002207",
"T000126",
"T018659",
"1727"
]
},
"release_date": "2021-02-16T23:00:00.000+00:00",
"title": "CVE-2021-23839"
},
{
"cve": "CVE-2021-23840",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in OpenSSL, welche beim Aufruf der Funktionen \"EVP_CipherUpdate\", \"EVP_EncryptUpdate\", \"EVP_DecryptUpdate\" auftritt. Es handelt sich um einen \u00dcberlauf-Fehler, der bei einem gro\u00dfen Output auftreten kann, wodurch der Wert der Output-L\u00e4nge negativ wird. Dies kann zu Problemen oder Abst\u00fcrzen bei der Weiterverarbeitung f\u00fchren. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"4035",
"T010951",
"T030689",
"T015127",
"T015126",
"T004914",
"T017494",
"228243",
"T020304",
"T024888",
"T019318",
"5930",
"398363",
"T015518",
"T035149",
"T015516",
"T016869",
"T013312",
"T012167",
"T019265",
"T019264",
"T032354",
"T018353",
"T019267",
"T016243",
"T017562",
"T019266",
"T017684",
"T019403",
"2951",
"T002207",
"T000126",
"T018659",
"1727"
]
},
"release_date": "2021-02-16T23:00:00.000+00:00",
"title": "CVE-2021-23840"
},
{
"cve": "CVE-2021-23841",
"notes": [
{
"category": "description",
"text": "Es existiert eine Schwachstelle in OpenSSL, welche in der \"X509_issuer_and_serial_hash()\" Funktion besteht. Hintergrund f\u00fcr die Schwachstelle ist, dass Fehler nicht richtig abgefangen werden, wenn diese beim Parsen des \"Issuer\"-Feldes auftreten. Als Folge tritt eine NULL-Zeiger Dereferenzierung auf. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"67646",
"4035",
"T010951",
"T030689",
"T015127",
"T015126",
"T004914",
"T017494",
"228243",
"T020304",
"T024888",
"T019318",
"5930",
"398363",
"T015518",
"T035149",
"T015516",
"T016869",
"T013312",
"T012167",
"T019265",
"T019264",
"T032354",
"T018353",
"T019267",
"T016243",
"T017562",
"T019266",
"T017684",
"T019403",
"2951",
"T002207",
"T000126",
"T018659",
"1727"
]
},
"release_date": "2021-02-16T23:00:00.000+00:00",
"title": "CVE-2021-23841"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.