CVE-2021-3449: NULL pointer deref in signature_algorithms processing

Modified

AliasesALPINE-CVE-2021-3449SUSE-SU-2021:0954-1SUSE-SU-2021:0955-1+12 more

Published 25-03-2021Last modified 08-10-2026

Vulnerability summary

CVE-2021-3449 is a medium (CVSS 5.9) NULL Pointer Dereference vulnerability in checkpoint multi-domain_management_firmware. EPSS estimates a 63.54% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 5.9, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

5.9/10

010

Medium · v3.1 (NVD)

EPSS score

63.54%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 11

MGASA-2021-0176 OPENSUSE-SU-2021:1059-1 OPENSUSE-SU-2021:1061-1 OPENSUSE-SU-2021:2327-1 OPENSUSE-SU-2021:2353-1 OPENSUSE-SU-2024:11041-1+11 more

Timeline

25-03-2021
PublishedVulnerability first disclosed.
08-10-2026
Last modifiedVulnerability information updated.

Description

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).

CVSS metrics

7 scores · 6 sources · 2 versions

v3.15.9v2.04.3

EPSS trend

Probability

63.54%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 63.54% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Siemens39 products

ruggedcom_rcm1224_firmware≥ 6.2 (No fix recorded)
scalance_m-800_firmware≥ 6.2 (No fix recorded)
scalance_s602_firmware≥ 4.1 (No fix recorded)
scalance_s612_firmware≥ 4.1 (No fix recorded)
scalance_s615_firmware≥ 6.2 (No fix recorded)

Show all 39

Oracle14 products

communications_communications_policy_management12.6.0.0.0
enterprise_manager_for_storage_management13.4.0.0
essbase21.2
graalvmEOL19.3.5 | 20.3.1.2 | 21.0.0.2
jd_edwards_enterpriseone_tools< 9.2.6.0

Show all 14

Suse10 products

openssl-1_1&distro=SUSE Linux Enterprise Micro 5.0< 1.1.1d-11.20.1
openssl-1_1&distro=SUSE Linux Enterprise Module for Basesystem 15 SP2< 1.1.1d-11.20.1
openssl-1_1&distro=SUSE Linux Enterprise Module for Certifications 15 SP3< 1.1.1d-11.20.1
openssl-1_1&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 1.1.1d-2.33.1
openssl-1_1&distro=SUSE Linux Enterprise Server 12 SP5< 1.1.1d-2.33.1

Show all 10

Netapp9 products

Show all 9

Redhat7 products

openssl< 1:1.1.1c-18.el8_2 | < 1:1.1.1c-5.el8_1
openssl-debuginfo< 1:1.1.1c-18.el8_2 | < 1:1.1.1c-5.el8_1
openssl-debugsource< 1:1.1.1c-18.el8_2 | < 1:1.1.1c-5.el8_1
openssl-devel< 1:1.1.1c-18.el8_2 | < 1:1.1.1c-5.el8_1
openssl-libs< 1:1.1.1c-18.el8_2 | < 1:1.1.1c-5.el8_1

Show all 7

Alpine4 products

openssl≥ 1.1.1, < 1.1.1k-r0
openssl1.1-compat< 1.1.1k-r0
openssl3< 1.1.1k-r0
synapse< 1.30.1-r0

Tenable4 products

log_correlation_engine< 6.0.9
nessus≤ 8.13.1
nessus_network_monitor5.11.0 | 5.11.1 | 5.12.0 | 5.12.1 | 5.13.0
tenable.sc≥ 5.13.0, ≤ 5.17.0

Checkpoint3 products

multi-domain_management_firmwarer80.40 | r81
quantum_security_gateway_firmwarer80.40 | r81
quantum_security_managementr80.40 | r81

Sonicwall3 products

capture_client3.5
sma100_firmware≥ 10.2.0.0, < 10.2.1.0-17sv
sonicos7.0.1.0

Ubuntu3 products

openssl< 1.1.1-1ubuntu2.1~18.04.9 | < 1.1.1f-1ubuntu2.3 | < 1.1.1-1ubuntu2.fips.2.1~18.04.9.1 | All versions (No fix recorded) | < 1.1.1f-1ubuntu2.fips.7 | < 1.1.1f-1ubuntu2.fips.2.8
postgresql-10< 10.18-0ubuntu0.18.04.1
postgresql-12< 12.8-0ubuntu0.20.04.1

Debian2 products

openssl< 1.1.1k-1 | < 1.1.1d-0+deb10u6
debian_linuxEOL9.0 | 10.0

Mcafee2 products

web_gateway8.2.19 | 9.2.10 | 10.1.1
web_gateway_cloud_service8.2.19 | 9.2.10 | 10.1.1

Crates.Io1 product

openssl-src< 111.15.0 | ≥ 0.0.0-0, < 111.15.0

Fedoraproject1 product

fedoraEOL34

Freebsd1 product

freebsdEOL12.2 | 12.2:p1 | 12.2:p2

Nodejs1 product

node.js≥ 10.0.0, ≤ 10.12.0 | ≥ 10.13.0, ≤ 10.24.0 | ≥ 12.0.0, ≤ 12.12.0 | ≥ 12.13.0, < 12.22.1 | ≥ 14.0.0, ≤ 14.14.0 | ≥ 14.15.0, < 14.16.1 | ≥ 15.0.0, < 15.14.0

Openssl1 product

opensslFixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j) | ≥ 1.1.1, < 1.1.1k

Opensuse1 product

openssl-1_1&distro=openSUSE Leap 15.2< 1.1.1d-lp152.7.15.1

18 vendors · 106 products

References

58 links

www.openssl.org/news/secadv/20210325.txtARTICLEREPORTWEBVendor Advisory
git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJdVendor AdvisoryWEBThird Party Advisory
www.debian.org/security/2021/dsa-4875Vendor AdvisoryWEBThird Party Advisory
www.openwall.com/lists/oss-security/2021/03/27/1Mailing ListWEBThird Party Advisory
www.openwall.com/lists/oss-security/2021/03/27/2Mailing ListWEBThird Party Advisory
www.openwall.com/lists/oss-security/2021/03/28/3Mailing ListWEBThird Party Advisory
www.openwall.com/lists/oss-security/2021/03/28/4Mailing ListWEBThird Party Advisory
security.gentoo.org/glsa/202103-03Vendor AdvisoryWEBThird Party Advisory
lists.fedoraproject.org/archives/…Vendor Advisory

Show all 58 references

www.oracle.com/security-alerts/cpuApr2021.htmlWEBPatchThird Party Advisory
www.tenable.com/security/tns-2021-10WEBThird Party Advisory
www.tenable.com/security/tns-2021-09WEBThird Party Advisory
security.netapp.com/advisory/ntap-20210513-0002/Third Party Advisory
security.netapp.com/advisory/ntap-20210326-0006/Third Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-21:07.openssl.ascWEBThird Party Advisory
www.tenable.com/security/tns-2021-06WEBThird Party Advisory
www.tenable.com/security/tns-2021-05WEBThird Party Advisory
kc.mcafee.com/corporate/index?page=content&id=SB10356WEBThird Party Advisory
www.oracle.com//security-alerts/cpujul2021.htmlWEBPatchThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-772220.pdfWEBPatchThird Party Advisory
kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845WEBThird Party Advisory
psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013WEBThird Party Advisory
lists.debian.org/debian-lts-announce/2021/08/msg00029.htmlMailing ListWEBThird Party Advisory
www.oracle.com/security-alerts/cpuoct2021.htmlWEBThird Party Advisory
www.oracle.com/security-alerts/cpuapr2022.htmlWEBPatchThird Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfWEBThird Party Advisory
www.oracle.com/security-alerts/cpujul2022.htmlWEBThird Party Advisory
security.netapp.com/advisory/ntap-20240621-0006/
security.alpinelinux.org/vuln/CVE-2021-3449Advisory
www.suse.com/support/update/announcement/2021/suse-su-20210954-1/Advisory
bugzilla.suse.com/1183852REPORT
www.suse.com/security/cve/CVE-2021-3449WEB
www.suse.com/support/update/announcement/2021/suse-su-20210955-1/Advisory
www.suse.com/support/update/announcement/2021/suse-su-20210955-2/Advisory
access.redhat.com/errata/RHSA-2021:1063Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1941554REPORT
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1063.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-3449REPORT
www.cve.org/CVERecord?id=CVE-2021-3449AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2021-3449Advisory
access.redhat.com/errata/RHSA-2021:1131Advisory
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1131.jsonAdvisory
ubuntu.com/security/CVE-2021-3449REPORT
ubuntu.com/security/notices/USN-4891-1Advisory
ubuntu.com/security/notices/USN-5038-1Advisory
github.com/nodejs/node/pull/38083REPORT
security-tracker.debian.org/tracker/CVE-2021-3449Advisory
lists.opensuse.org/archives/…Advisory
security.netapp.com/advisory/ntap-20210513-0002WEB
security.netapp.com/advisory/ntap-20210326-0006WEB
rustsec.org/advisories/RUSTSEC-2021-0055.htmlWEBAdvisory
rustsec.org/advisories/RUSTSEC-2021-0055WEB
lists.fedoraproject.org/archives/…WEB
github.com/alexcrichton/openssl-src-rsPACKAGE
git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fb9fa6b51defd48157eeb207f52181f735d96148WEB
crates.io/crates/openssl-srcPACKAGE