UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3450

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a…

Severity
High 7.4
Published
25 Mar 2021
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.1.1k, 10.24.1, 12.22.1, 14.16.1, 15.14.0
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 10.0.0 before 10.24.1
  • From 12.0.0 before 12.22.1
  • From 14.0.0 before 14.16.1
  • From 15.0.0 before 15.14.0
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.1.1h before 1.1.1k
MySQLServers and applications · cpe:a:oracle:mysql_server
  • Every version up to 5.7.33
  • From 8.0.15 up to 8.0.23

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3450
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3450