UpHeron
All vulnerabilities

Servers and applications

CVE-2021-23839

OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is…

Severity
Low 3.7
Published
16 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2s up to 1.0.2x

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-23839
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-23839