high
7.5
CWE
476
Advisory Published
Advisory Published
Updated

CVE-2021-3449: NULL pointer deref in signature_algorithms processing

First published: Thu Mar 25 2021(Updated: )

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).

Credit: openssl-security@openssl.org openssl-security@openssl.org openssl-security@openssl.org

Affected SoftwareAffected VersionHow to fix
rust/openssl-src<111.15.0
111.15.0
debian/openssl
1.1.1n-0+deb10u3
1.1.1n-0+deb10u6
1.1.1w-0+deb11u1
1.1.1n-0+deb11u5
3.0.11-1~deb12u1
3.0.11-1~deb12u2
3.0.11-1
3.0.12-1
IBM Security Verify Bridge<=All
OpenSSL>=1.1.1<1.1.1k
Debian Linux=9.0
Debian Linux=10.0
FreeBSD Kernel=12.2
FreeBSD Kernel=12.2-p1
FreeBSD Kernel=12.2-p2
NetApp Active IQ Unified Manager for VMware vSphere
NetApp ONTAP Mediator
NetApp E-Series Performance Analyzer
NetApp OnCommand Insight
NetApp OnCommand Workflow Automation
NetApp ONTAP Select Deploy
NetApp SANtricity SMI-S Provider Firmware
NetApp SnapCenter
NetApp StorageGRID Webscale
Tenable Log Correlation Engine<6.0.9
Nessus<=8.13.1
Tenable Nessus=5.11.0
Tenable Nessus=5.11.1
Tenable Nessus=5.12.0
Tenable Nessus=5.12.1
Tenable Nessus=5.13.0
Tenable.sc>=5.13.0<=5.17.0
Red Hat Fedora=34
McAfee Web Gateway Cloud Service=8.2.19
McAfee Web Gateway Cloud Service=9.2.10
McAfee Web Gateway Cloud Service=10.1.1
McAfee Web Gateway Cloud Service=8.2.19
McAfee Web Gateway Cloud Service=9.2.10
McAfee Web Gateway Cloud Service=10.1.1
Check Point Quantum Security Management=r80.40
Check Point Quantum Security Management=r81
Check Point Quantum Security Management
Checkpoint Multi-Domain Management=r80.40
Checkpoint Multi-Domain Management=r81
Checkpoint Multi-domain Management
Checkpoint Quantum Security Gateway Firmware=r80.40
Checkpoint Quantum Security Gateway Firmware=r81
Check Point Quantum Security Gateway
Oracle Communications Policy Management=12.6.0.0.0
Oracle Enterprise Manager for Storage Management=13.4.0.0
Oracle Hyperion Essbase=21.2
Oracle GraalVM Enterprise Edition=19.3.5
Oracle GraalVM Enterprise Edition=20.3.1.2
Oracle GraalVM Enterprise Edition=21.0.0.2
Oracle JD Edwards EnterpriseOne Tools<9.2.6.0
Oracle JD Edwards World Security=a9.4
Oracle MySQL Connectors<=8.0.23
MySQL<=5.7.33
MySQL>=8.0.15<=8.0.23
MySQL Workbench<=8.0.23
Oracle PeopleTools=8.57
Oracle PeopleTools=8.58
Oracle PeopleTools=8.59
Oracle Unifier>=17.7<=17.12
Oracle Unifier=19.12
Oracle Unifier=20.12
Oracle Unifier=21.12
Oracle Secure Backup<18.1.0.1.0
Tarantella Secure Global Desktop=5.6
Oracle Storage Cloud Software Appliance=8.8
SonicWall SMA 100 firmware>=10.2.0.0<10.2.1.0-17sv
SonicWall SMA 100
SonicWall Capture Client=3.5
SonicWall SonicOS=7.0.1.0
Siemens Ruggedcom Firmware>=6.2
Siemens RUGGEDCOM RM1224
Siemens Scalance LPE9403 Firmware
Siemens Scalance LPE9403 Firmware
Siemens SCALANCE M-800>=6.2
Siemens Scalance M-800 Firmware
Siemens Scalance S602 Firmware>=4.1
Siemens Scalance S602 Firmware
Siemens Scalance S612 Firmware>=4.1
Siemens Scalance S612 Firmware
Siemens Scalance S615 EEC Firmware>=6.2
Siemens Scalance S615 Firmware
Siemens Scalance S623 Firmware>=4.1
Siemens Scalance S623 Firmware
Siemens Scalance S Firmware>=4.1
Siemens Scalance S627-2M Firmware
Siemens Scalance S602 Firmware>=2.0
Siemens SCALANCE SC-600 family
Siemens Scalance W700 Series Firmware>=6.5
Siemens Scalance W700 Firmware
Siemens Scalance W1700 Firmware>=2.0
Siemens Scalance W1700 Firmware
Siemens Scalance XB-200 Firmware<4.3
Siemens SCALANCE XB-200
Siemens Scalance XC-200 Firmware<4.3
Siemens SCALANCE XC-200
Siemens Scalance XF-200BA Firmware<4.3
Siemens SCALANCE XF-200BA
Siemens Scalance XM-400 Firmware<6.4
Siemens Scalance XM-400 Firmware
Siemens Scalance XP-200 Firmware<4.3
Siemens SCALANCE XP-200
Siemens SCALANCE XR300-WG firmware<4.3
Siemens SCALANCE X-300WG
Siemens Scalance XR524-8C<6.4
Siemens Scalance XR524
Siemens Scalance XR526-8C L3 Firmware<6.4
Siemens Scalance XR526-8C Firmware
Siemens Scalance XR528-6M L3<6.4
Siemens Scalance XR528-6M 2HR2 Firmware
Siemens Scalance XR552 Firmware<6.4
Siemens Scalance XR552 Firmware
Siemens Simatic Cloud Connect 7>=1.1
Siemens Simatic Cloud Connect 7
Siemens Simatic Cloud Connect 7 CC712
Siemens Simatic CP 1242-7 GPRS Firmware>=3.1
Siemens Simatic CP 1242-7 GPRS Firmware
Siemens Simatic CP 1242-7 GPRS Firmware
Siemens SIMATIC HMI Basic Panels 2nd Generation Firmware
Siemens SIMATIC HMI Basic Panels
siemens SIMATIC HMI Comfort Outdoor Panels 15" firmware
Siemens SIMATIC HMI Comfort Outdoor Panels
Siemens SIMATIC HMI KTP Mobile Panels Firmware
Siemens SIMATIC HMI Mobile Panels firmware
Siemens Simatic MV500
Siemens Simatic MV500 Firmware
Siemens SIMATIC CP 1243-1 Firmware>=3.1
Siemens SIMATIC CP 1243-1
Siemens Simatic Net CP 1243-7 LTE EU Firmware>=3.1
Siemens Simatic Net CP 1243-7 LTE EU Firmware
Siemens Simatic Net CP 1243-7 LTE US Firmware>=3.1
Siemens SIMATIC CP 1243-7 LTE/US Firmware
Siemens SIMATIC CP 1243-8 IRC Firmware>=3.1
Siemens Simatic Net CP 1243-8 IRC Firmware
Siemens SIMATIC CP 1542SP-1 IRC Firmware>=2.1
Siemens SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants)
Siemens Simatic CP 1543-1 Firmware>=2.2<3.0
Siemens Simatic CP 1543-1
Siemens Simatic CP 1543SP-1 Firmware>=2.1
Siemens Simatic CP 1543SP-1
Siemens Simatic Net CP 1545-1>=1.0
Siemens Simatic Net CP 1545-1
Siemens SIMATIC PCS 7 Telecontrol
Siemens SIMATIC PCS 7
Siemens PCS neo
Siemens Simatic PCS neo Firmware
Siemens Simatic PDM>=9.1.0.7
Siemens Simatic PDM Firmware
Siemens SIMATIC Process Historian OPC UA Server>=2019
Siemens Simatic Process Historian OPC UA Server Firmware
Siemens Simatic RF166C
Siemens Simatic RF166C Firmware
Siemens Simatic RF185C Firmware
Siemens Simatic RF185C Firmware
Siemens Simatic RF186C
Siemens Simatic RF186C Firmware
Siemens Simatic RF186C
Siemens Simatic RF186Ci Firmware
Siemens SIMATIC RF188C Firmware
Siemens Simatic RF188C
Siemens Simatic RF188CI Firmware
Siemens Simatic RF188CI Firmware
Siemens Simatic RF360R Firmware
Siemens Simatic RF360R Firmware
Siemens S7-1200 CPU 1211C Firmware
Siemens Simatic S7-1200 CPU 1211C Firmware
Siemens S7-1200 CPU 1212C Firmware
Siemens SIMATIC S7-1200 CPU 1212C Firmware
Siemens S7-1200 CPU 1212FC Firmware
Siemens S7-1200 CPU 1212FC
Siemens SIMATIC S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly
Siemens S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU
Siemens Simatic S7-1200 CPU Firmware
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC
Siemens CPU 1215C
Siemens S7-1200 CPU 1217C Firmware
Siemens S7-1200 CPU 1217C
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens Sinamics Connect 300 Firmware
Siemens Sinamics Connect 300 Firmware
Siemens Simatic TIM 1531 IRC Firmware>=2.0<2.2
Siemens TIM 1531 IRC Firmware
Siemens SIMATIC Logon>=1.6.0.2
Siemens SIMATIC Logon=1.5-sp3_update_1
Siemens SIMATIC WinCC Runtime Advanced
Siemens Simatic WinCC Telecontrol
Siemens SINEC NMS SP1 Update 1=1.0
Siemens SINEC NMS SP1 Update 1=1.0-sp1
Siemens SINEC PNI
Siemens SINEMA Server SP3=14.0
Siemens SINEMA Server SP3=14.0-sp1
Siemens SINEMA Server SP3=14.0-sp2
Siemens SINEMA Server SP3=14.0-sp2_update1
Siemens SINEMA Server SP3=14.0-sp2_update2
Siemens Sinumerik OPC UA Server
Siemens TIA Administrator
Siemens SINEC Infrastructure Network Services<1.0.1.1
Node.js>=10.0.0<=10.12.0
Node.js>=10.13.0<=10.24.0
Node.js>=12.0.0<=12.12.0
Node.js>=12.13.0<12.22.1
Node.js>=14.0.0<=14.14.0
Node.js>=14.15.0<14.16.1
Node.js>=15.0.0<15.14.0
All of
Any of
Check Point Quantum Security Management=r80.40
Check Point Quantum Security Management=r81
Check Point Quantum Security Management
All of
Any of
Checkpoint Multi-Domain Management=r80.40
Checkpoint Multi-Domain Management=r81
Checkpoint Multi-domain Management
All of
Any of
Checkpoint Quantum Security Gateway Firmware=r80.40
Checkpoint Quantum Security Gateway Firmware=r81
Check Point Quantum Security Gateway
All of
SonicWall SMA 100 firmware>=10.2.0.0<10.2.1.0-17sv
SonicWall SMA 100
All of
Siemens Ruggedcom Firmware>=6.2
Siemens RUGGEDCOM RM1224
All of
Siemens Scalance LPE9403 Firmware
Siemens Scalance LPE9403 Firmware
All of
Siemens SCALANCE M-800>=6.2
Siemens Scalance M-800 Firmware
All of
Siemens Scalance S602 Firmware>=4.1
Siemens Scalance S602 Firmware
All of
Siemens Scalance S612 Firmware>=4.1
Siemens Scalance S612 Firmware
All of
Siemens Scalance S615 EEC Firmware>=6.2
Siemens Scalance S615 Firmware
All of
Siemens Scalance S623 Firmware>=4.1
Siemens Scalance S623 Firmware
All of
Siemens Scalance S Firmware>=4.1
Siemens Scalance S627-2M Firmware
All of
Siemens Scalance S602 Firmware>=2.0
Siemens SCALANCE SC-600 family
All of
Siemens Scalance W700 Series Firmware>=6.5
Siemens Scalance W700 Firmware
All of
Siemens Scalance W1700 Firmware>=2.0
Siemens Scalance W1700 Firmware
All of
Siemens Scalance XB-200 Firmware<4.3
Siemens SCALANCE XB-200
All of
Siemens SCALANCE XC-200
Siemens Scalance XC-200 Firmware<4.3
All of
Siemens SCALANCE XF-200BA
Siemens Scalance XF-200BA Firmware<4.3
All of
Siemens Scalance XM-400 Firmware
Siemens Scalance XM-400 Firmware<6.4
All of
Siemens SCALANCE XP-200
Siemens Scalance XP-200 Firmware<4.3
All of
Siemens SCALANCE X-300WG
Siemens SCALANCE XR300-WG firmware<4.3
All of
Siemens Scalance XR524
Siemens Scalance XR524-8C<6.4
All of
Siemens Scalance XR526-8C Firmware
Siemens Scalance XR526-8C L3 Firmware<6.4
All of
Siemens Scalance XR528-6M 2HR2 Firmware
Siemens Scalance XR528-6M L3<6.4
All of
Siemens Scalance XR552 Firmware<6.4
Siemens Scalance XR552 Firmware
All of
Any of
Siemens Simatic Cloud Connect 7>=1.1
Siemens Simatic Cloud Connect 7
Siemens Simatic Cloud Connect 7 CC712
All of
Any of
Siemens Simatic CP 1242-7 GPRS Firmware>=3.1
Siemens Simatic CP 1242-7 GPRS Firmware
Siemens Simatic CP 1242-7 GPRS Firmware
All of
Siemens SIMATIC HMI Basic Panels 2nd Generation Firmware
Siemens SIMATIC HMI Basic Panels
All of
siemens SIMATIC HMI Comfort Outdoor Panels 15" firmware
Siemens SIMATIC HMI Comfort Outdoor Panels
All of
Siemens SIMATIC HMI KTP Mobile Panels Firmware
Siemens SIMATIC HMI Mobile Panels firmware
All of
Siemens Simatic MV500
Siemens Simatic MV500 Firmware
All of
Siemens SIMATIC CP 1243-1 Firmware>=3.1
Siemens SIMATIC CP 1243-1
All of
Siemens Simatic Net CP 1243-7 LTE EU Firmware>=3.1
Siemens Simatic Net CP 1243-7 LTE EU Firmware
All of
Siemens Simatic Net CP 1243-7 LTE US Firmware>=3.1
Siemens SIMATIC CP 1243-7 LTE/US Firmware
All of
Siemens SIMATIC CP 1243-8 IRC Firmware>=3.1
Siemens Simatic Net CP 1243-8 IRC Firmware
All of
Siemens SIMATIC CP 1542SP-1 IRC Firmware>=2.1
Siemens SIMATIC NET CP 1542SP-1 IRC (incl. SIPLUS variants)
All of
Siemens Simatic CP 1543-1 Firmware>=2.2<3.0
Siemens Simatic CP 1543-1
All of
Siemens Simatic CP 1543SP-1 Firmware>=2.1
Siemens Simatic CP 1543SP-1
All of
Siemens Simatic Net CP 1545-1>=1.0
Siemens Simatic Net CP 1545-1
All of
Siemens SIMATIC PCS 7 Telecontrol
Siemens SIMATIC PCS 7
All of
Siemens PCS neo
Siemens Simatic PCS neo Firmware
All of
Siemens Simatic PDM>=9.1.0.7
Siemens Simatic PDM Firmware
All of
Siemens SIMATIC Process Historian OPC UA Server>=2019
Siemens Simatic Process Historian OPC UA Server Firmware
All of
Siemens Simatic RF166C
Siemens Simatic RF166C Firmware
All of
Siemens Simatic RF185C Firmware
Siemens Simatic RF185C Firmware
All of
Siemens Simatic RF186C
Siemens Simatic RF186C Firmware
All of
Siemens Simatic RF186C
Siemens Simatic RF186Ci Firmware
All of
Siemens SIMATIC RF188C Firmware
Siemens Simatic RF188C
All of
Siemens Simatic RF188CI Firmware
Siemens Simatic RF188CI Firmware
All of
Siemens Simatic RF360R Firmware
Siemens Simatic RF360R Firmware
All of
Siemens S7-1200 CPU 1211C Firmware
Siemens Simatic S7-1200 CPU 1211C Firmware
All of
Siemens S7-1200 CPU 1212C Firmware
Siemens SIMATIC S7-1200 CPU 1212C Firmware
All of
Siemens S7-1200 CPU 1212FC Firmware
Siemens S7-1200 CPU 1212FC
All of
Siemens SIMATIC S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU 1214FC DC/DC/Rly
All of
Siemens S7-1200 CPU 1214C Firmware
Siemens SIMATIC S7-1200 CPU
All of
Siemens Simatic S7-1200 CPU Firmware
Siemens SIMATIC S7-1200 CPU 1215FC DC/DC/DC
All of
Siemens SIMATIC S7-1200 CPU 1215C DC/DC/DC
Siemens CPU 1215C
All of
Siemens S7-1200 CPU 1217C Firmware
Siemens S7-1200 CPU 1217C
All of
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
Siemens Simatic S7-1500 CPU 1518-4 PN/DP MFP
All of
Siemens Sinamics Connect 300 Firmware
Siemens Sinamics Connect 300 Firmware
All of
Siemens Simatic TIM 1531 IRC Firmware>=2.0<2.2
Siemens TIM 1531 IRC Firmware

Remedy

https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf

Remedy

https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148

Remedy

https://www.oracle.com//security-alerts/cpujul2021.html

Remedy

https://www.oracle.com/security-alerts/cpuApr2021.html

Remedy

https://www.oracle.com/security-alerts/cpuapr2022.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2021-3449?

    CVE-2021-3449 is a vulnerability in OpenSSL TLS servers that can cause a crash when a malicious renegotiation ClientHello message is sent.

  • How severe is CVE-2021-3449?

    CVE-2021-3449 has a severity rating of medium with a CVSS score of 5.9.

  • Which software is affected by CVE-2021-3449?

    OpenSSL versions up to and including 1.1.1n, 3.0.9, and 3.0.10 are affected by CVE-2021-3449.

  • How can I fix CVE-2021-3449?

    Update your OpenSSL software to version 1.1.1o, 3.0.11, or later to mitigate the vulnerability.

  • Where can I find more information about CVE-2021-3449?

    You can find more information about CVE-2021-3449 in the NVD and CERT-Portal advisories, as well as the OpenSSL Git repository.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203