UpHeron
All vulnerabilities

Servers and applications

CVE-2021-23841

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref…

Severity
Medium 5.9
Published
16 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2y, 1.1.1j, 5.7.33, 8.0.23
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2y
  • From 1.1.1 before 1.1.1j
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version before 5.7.33
  • From 8.0.15 before 8.0.23

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-23841
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-23841