UpHeron
All vulnerabilities

Servers and applications

CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i"…

Severity
High 7.4
Published
24 Aug 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
1.0.2za, 1.1.1l
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 1.0.2 before 1.0.2za
  • From 1.1.1 before 1.1.1l
MySQLServers and applications · cpe:a:oracle:mysql_server
  • From 5.7.0 up to 5.7.35
  • From 8.0.0 up to 8.0.26

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3712
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3712