UpHeron
All vulnerabilities

Servers and applications

CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may…

Severity
Medium 5.9
Published
8 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2x, 1.1.1i, 10.23.1, 12.20.1, 14.15.4, 15.5.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 15.0.0 before 15.5.0
  • From 14.15.0 before 14.15.4
  • From 14.0.0 up to 14.14.0
  • From 12.13.0 before 12.20.1
All 7 release lines
  • From 10.0.0 up to 10.12.0
  • From 10.13.0 before 10.23.1
  • From 12.0.0 up to 12.12.0
  • From 12.13.0 before 12.20.1
  • From 14.0.0 up to 14.14.0
  • From 14.15.0 before 14.15.4
  • From 15.0.0 before 15.5.0
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2x
  • From 1.1.1 before 1.1.1i
MySQLServers and applications · cpe:a:oracle:mysql
  • Every version up to 8.0.22
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version up to 5.7.32
  • From 8.0.15 up to 8.0.22

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-1971
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-1971