CVE-2021-23840 · threatengine.sh

Home/CVE/Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases

CVE

CVE-2021-23840

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash.

OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue.

However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j.

Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).

HIGH · CVSS 7.5 EPSS 0.00463

Schedule remediation

SSVC automatable: yes - attacks can be scripted at scale
CVSS base score ≥ 7.0

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-190Integer Overflow or Wraparound

CWE-190Integer Overflow or Wraparound

▤

Affected Products & Versions

36

openssl>= 1.0.2 and < 1.0.2y
openssl>= 1.1.1 and < 1.1.1j
debian linuxall versions
tenable log correlation engine< 6.0.8
tenable nessus network monitorall versions
oracle business intelligenceall versions
oracle communications cloud native core policyall versions
oracle enterprise manager for storage managementall versions
Show all 36 affected productsoracle enterprise manager ops centerall versions
oracle graalvmall versions
oracle jd edwards enterpriseone tools< 9.2.6.0
oracle jd edwards world securityall versions
oracle mysql server< 5.7.33
oracle mysql server>= 8.0.15 and < 8.0.23
oracle nosql database< 20.3
mcafee epolicy orchestrator< 5.10.0
mcafee epolicy orchestratorall versions
fujitsu m10-1 firmware< xcp2410
fujitsu m10-4 firmware< xcp2410
fujitsu m10-4s firmware< xcp2410
fujitsu m12-1 firmware< xcp2410
fujitsu m12-2 firmware< xcp2410
fujitsu m12-2s firmware< xcp2410
fujitsu m10-1 firmware< xcp3110
fujitsu m10-4 firmware< xcp3110
fujitsu m10-4s firmware< xcp3110
fujitsu m12-1 firmware< xcp3110
fujitsu m12-2 firmware< xcp3110
fujitsu m12-2s firmware< xcp3110
nodejs node.js>= 10.0.0 and <= 10.12.0
nodejs node.js>= 10.13.0 and < 10.24.0
nodejs node.js>= 12.0.0 and <= 12.12.0
nodejs node.js>= 12.13.0 and < 12.21.0
nodejs node.js>= 14.0.0 and <= 14.14.0
nodejs node.js>= 15.0.0 and < 15.10.0
nodejs node.jsall versions

▤

Affected Packages

1

Language-ecosystem packages (from OSV) tied to this CVE, with the version that fixes it - the dependency-level detail NVD doesn’t carry.

crates.io openssl-src HIGH fixed in 111.14.0

▣

Scoring & Timeline

7.5

HIGH · CVSS v3.1 · openssl-security@openssl.org

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD16 Feb 2021 · 05:15 PM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC triage · cisa-vulnrichment

Exploitation

none

Automatable

yes

Technical impact

partial

SSVC asks the questions that actually drive patch urgency: is it being exploited, can attacks be automated, and how total is the impact.

⚑

Vendor Advisories

30

msrcCVE-2021-23840
usnUSN-7018-1
suse-csafopenSUSE-SU-2024:11126-1
suse-csafopenSUSE-SU-2024:11127-1
siemens-csafSSA-389290
Show all 30 vendor advisoriesrhsaRHSA-2021:3254Moderate
rhsaRHSA-2021:4863Important
rhsaRHSA-2021:4861Important
usnUSN-5088-1
rhsaRHSA-2021:4614Moderate
rhsaRHSA-2021:4613Moderate
rhsaRHSA-2021:1168Important
suse-csafSUSE-SU-2021:0939-1
suse-csafSUSE-SU-2021:14670-1
suse-csafSUSE-SU-2021:14667-1
suse-csafopenSUSE-SU-2021:0427-1
suse-csafopenSUSE-SU-2021:0430-1
suse-csafSUSE-SU-2021:0793-1
suse-csafSUSE-SU-2021:0769-1
suse-csafSUSE-SU-2021:0752-1
suse-csafSUSE-SU-2021:0753-1
suse-csafSUSE-SU-2021:0754-1
suse-csafSUSE-SU-2021:0755-1
suse-csafSUSE-SU-2021:0725-1
suse-csafopenSUSE-SU-2021:0372-1
suse-csafSUSE-SU-2021:0673-1
suse-csafSUSE-SU-2021:0674-1
suse-csafopenSUSE-SU-2021:0357-1
suse-csafSUSE-SU-2021:0649-1
suse-csafSUSE-SU-2021:0651-1

🔗

References & Sources

20

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfThird Party Advisory

https://git.openssl.org/gitweb/?p=openssl.git

https://git.openssl.org/gitweb/?p=openssl.git

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10366Third Party Advisory

https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

Show all 20 references

https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E

https://security.gentoo.org/glsa/202103-03Third Party Advisory

https://security.netapp.com/advisory/ntap-20210219-0009/Third Party Advisory

https://security.netapp.com/advisory/ntap-20240621-0006/

https://www.debian.org/security/2021/dsa-4855Third Party Advisory

https://www.openssl.org/news/secadv/20210216.txtVendor Advisory

https://www.oracle.com//security-alerts/cpujul2021.htmlPatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.htmlPatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.htmlPatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.htmlPatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.htmlPatchThird Party Advisory

https://www.tenable.com/security/tns-2021-03Third Party Advisory

https://www.tenable.com/security/tns-2021-09Third Party Advisory

https://www.tenable.com/security/tns-2021-10Third Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin