Логотип exploitDog
bind:CVE-2021-3712
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-3712

Количество 41

Количество 41

ubuntu логотип

CVE-2021-3712

почти 4 года назад

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL ter...

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2021-3712

почти 4 года назад

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL ter...

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2021-3712

почти 4 года назад

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL termin

CVSS3: 7.4
EPSS: Низкий
msrc логотип

CVE-2021-3712

больше 3 лет назад

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2021-3712

почти 4 года назад

ASN.1 strings are represented internally within OpenSSL as an ASN1_STR ...

CVSS3: 7.4
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:2994-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:2966-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:2827-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1261-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1248-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1189-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3144-1

больше 3 лет назад

Security update for openssl

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3019-1

почти 4 года назад

Security update for compat-openssl098

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2996-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2995-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2994-1

почти 4 года назад

Security update for openssl-1_0_0

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2968-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2967-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2966-1

почти 4 года назад

Security update for openssl-1_1

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:2852-1

почти 4 года назад

Security update for compat-openssl098

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL ter...

CVSS3: 7.4
1%
Низкий
почти 4 года назад
redhat логотип
CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL ter...

CVSS3: 7.4
1%
Низкий
почти 4 года назад
nvd логотип
CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array by directly setting the "data" and "length" fields in the ASN1_STRING array. This can also happen by using the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to assume that the ASN1_STRING byte array will be NUL termin

CVSS3: 7.4
1%
Низкий
почти 4 года назад
msrc логотип
CVSS3: 7.4
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STR ...

CVSS3: 7.4
1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:2994-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:2966-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:2827-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:1261-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:1248-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2021:1189-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:3144-1

Security update for openssl

1%
Низкий
больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3019-1

Security update for compat-openssl098

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2996-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2995-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2994-1

Security update for openssl-1_0_0

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2968-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2967-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2966-1

Security update for openssl-1_1

1%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2021:2852-1

Security update for compat-openssl098

1%
Низкий
почти 4 года назад

Уязвимостей на страницу