Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-23718 State: PUBLISHED Published: 2021-11-22T17:00:11.635747Z Last Updated: 2024-09-16T19:09:26.902Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P) Vendors: n/a Products: ssrf-agent Problem Types: Server-side Request Forgery (SSRF) Description: The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker function. It fails to properly validate if the IP requested is private. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-SSRFAGENT-1584362 - https://github.com/welefen/ssrf-agent/blob/cec2b85fe8886ad6926a247a3e059d8369ec022b/index.js%23L13 - https:/
T-1584362 - https://github.com/welefen/ssrf-agent/blob/cec2b85fe8886ad6926a247a3e059d8369ec022b/index.js%23L13 - https://security.netapp.com/advisory/ntap-20211203-0005/
CVE ID: CVE-2021-23727 State: PUBLISHED Published: 2021-12-29T16:35:11.896554Z Last Updated: 2024-09-16T20:53:22.597Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: n/a Products: celery Problem Types: Stored Command Injection Description: This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.
backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PYTHON-CELERY-2314953 - https://github.com/celery/celery/blob/master/Changelog.rst%23522 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYXRGHWHD2WWMHBWCVD5ULVINPKNY3P5/
CVE ID: CVE-2021-23732 State: PUBLISHED Published: 2021-11-22T17:00:16.652953Z Last Updated: 2024-09-17T03:22:30.852Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: docker-cli-js Problem Types: Arbitrary Code Execution Description: This affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-DOCKERCLIJS-1568516 - https://security.netapp.com/advisory/ntap-20211223-0004/
CVE ID: CVE-2021-23758 State: PUBLISHED Published: 2021-12-03T20:05:12.932952Z Last Updated: 2024-09-17T01:16:27.750Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: AjaxPro.2 Problem Types: Deserialization of Untrusted Data Description: All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-DOTNET-AJAXPRO2-1925971 - https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a956
-DOTNET-AJAXPRO2-1925971 - https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 - http://packetstormsecurity.com/files/175677/AjaxPro-Deserialization-Remote-Code-Execution.html
CVE ID: CVE-2021-23760 State: PUBLISHED Published: 2022-01-28T21:31:30.439043Z Last Updated: 2024-09-17T01:31:13.646Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: n/a Problem Types: n/a Description: The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix to [CVE-2020-28272](https://security.snyk.io/vuln/SNYK-JS-KEYGET-1048048) Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-KEYGET-2342624
CVE ID: CVE-2021-23771 State: PUBLISHED Published: 2022-03-17T11:20:35.048563Z Last Updated: 2024-09-17T00:20:38.770Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P) Vendors: n/a Products: notevil, argencoders-notevil Problem Types: Sandbox Bypass Description: This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL
s vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878). Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NOTEVIL-2385946 - https://snyk.io/vuln/SNYK-JS-ARGENCODERSNOTEVIL-2388587
CVE ID: CVE-2021-23772 State: PUBLISHED Published: 2021-12-24T12:05:14.635531Z Last Updated: 2024-09-16T20:03:06.172Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: github.com/kataras/iris, github.com/kataras/iris/v12 Problem Types: Arbitrary File Write Description: This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-GOLANG-GITHU
d target folder. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMKATARASIRIS-2325169 - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMKATARASIRISV12-2325170 - https://github.com/kataras/iris/commit/e213dba0d32ff66653e0ef124bc5088817264b08
CVE ID: CVE-2021-23784 State: PUBLISHED Published: 2021-11-03T17:20:42.450684Z Last Updated: 2024-09-17T01:45:32.116Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P) Vendors: n/a Products: tempura Problem Types: Cross-site Scripting (XSS) Description: This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-TEMPURA-1569633 - https://github.com/lukeed/tempura/commit/58a5c3671e2f36b26810e77ead9e0dd471902f9b - htt
o/vuln/SNYK-JS-TEMPURA-1569633 - https://github.com/lukeed/tempura/commit/58a5c3671e2f36b26810e77ead9e0dd471902f9b - https://github.com/lukeed/tempura/releases/tag/v0.4.0
CVE ID: CVE-2021-23792 State: PUBLISHED Published: 2022-05-06T20:05:10.831568Z Last Updated: 2024-09-16T18:49:06.992Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: com.twelvemonkeys.imageio:imageio-metadata Problem Types: XML External Entity (XXE) Injection Description: The package com.twelvemonkeys.imageio:imageio-metadata before 3.7.1 are vulnerable to XML External Entity (XXE) Injection due to an insecurely initialized XML parser for reading XMP Metadata. An attacker can exploit this vulnerability if they are able to supply a file (e.g. when an online profile picture is processed) with a malicious XMP segment. If the XMP metadata of the uplo
a file (e.g. when an online profile picture is processed) with a malicious XMP segment. If the XMP metadata of the uploaded image is parsed, then the XXE vulnerability is triggered. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JAVA-COMTWELVEMONKEYSIMAGEIO-2316763 - https://github.com/haraldk/TwelveMonkeys/commit/da4efe98bf09e1cce91b7633cb251958a200fc80
CVE ID: CVE-2021-23797 State: PUBLISHED Published: 2021-12-17T20:05:11.548113Z Last Updated: 2024-09-16T19:30:59.841Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: http-server-node Problem Types: Directory Traversal Description: All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-HTTPSERVERNODE-1727656
CVE ID: CVE-2021-23803 State: PUBLISHED Published: 2021-12-17T20:05:25.479890Z Last Updated: 2024-09-16T17:48:03.457Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: latte/latte Problem Types: Access Control Bypass Description: This affects the package latte/latte before 2.10.6. There is a way to bypass allowFunctions that will affect the security of the application. When the template is set to allow/disallow the use of certain functions, adding control characters (x00-x08) after the function will bypass these restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-LATTELATTE-1932226 -
ns. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-PHP-LATTELATTE-1932226 - https://github.com/nette/latte/issues/279 - https://github.com/nette/latte/commit/227c86eda9a8a6d060ea8501923e768b6d992210
CVE ID: CVE-2021-23807 State: PUBLISHED Published: 2021-11-03T17:20:29.421178Z Last Updated: 2024-09-16T23:25:55.568Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: jsonpointer Problem Types: Prototype Pollution Description: This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577288 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273 - https://github.com/janl/node-jsonpointer/pull/51 - https://g
88 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273 - https://github.com/janl/node-jsonpointer/pull/51 - https://github.com/janl/node-jsonpointer/commit/a0345f3550cd9c4d89f33b126390202b89510ad4
CVE ID: CVE-2021-23814 State: PUBLISHED Published: 2021-12-17T20:00:14.149150Z Last Updated: 2025-06-17T11:38:06.941Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P) Vendors: n/a Products: unisharp/laravel-filemanager Problem Types: CWE-94 Description: This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading. An attacker may be able to reproduce the following steps: 1. Install a package with a web Laravel application. 2. Navigate to the Upload window 3. Upload an image file, then capture the request 4. Edit the request contents with a malicious file (webshell)
d window 3. Upload an image file, then capture the request 4. Edit the request contents with a malicious file (webshell) 5. Enter the path of file uploaded on URL - Remote Code Execution **Note:** Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories). Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199 - https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php%23L26 - https://github.com/UniSharp/laravel-filemanage
avel-filemanager/blob/master/src/Controllers/UploadController.php%23L26 - https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.5.1 - https://github.com/UniSharp/laravel-filemanager/issues/1113 - https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.6.2
CVE ID: CVE-2021-23820 State: PUBLISHED Published: 2021-11-03T17:20:10.614623Z Last Updated: 2024-09-16T16:14:13.506Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: json-pointer Problem Types: Prototype Pollution Description: This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577287 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910686 - https://github.com/manuelstofer/json-pointer/blob/master/index.js%23L78
CVE ID: CVE-2021-23824 State: PUBLISHED Published: 2022-01-13T14:10:20.047966Z Last Updated: 2024-09-16T23:55:47.509Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: n/a Products: Crow Problem Types: Content Injection Description: This affects the package Crow before 0.3+4. When using attributes without quotes in the template, an attacker can manipulate the input to introduce additional attributes, potentially executing code. This may lead to a Cross-site Scripting (XSS) vulnerability, assuming an attacker can influence the value entered into the template. If the template is used to render user-generated content, this vulnerability may escalate to a persiste
to the template. If the template is used to render user-generated content, this vulnerability may escalate to a persistent XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CrowCpp/Crow/pull/317 - https://github.com/CrowCpp/Crow/releases/tag/v0.3%2B4 - https://snyk.io/vuln/SNYK-UNMANAGED-CROW-2336164
CVE ID: CVE-2021-23827 State: PUBLISHED Published: 2021-02-22T23:07:21 Last Updated: 2024-08-03T19:14:08.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the "Explode message/Explode now" functionality. Local filesystem access is needed by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keybase/cli
needed by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keybase/client/releases - https://johnjhacking.com/blog/cve-2021-23827/ - https://hackerone.com/reports/1074930
CVE ID: CVE-2021-23835 State: PUBLISHED Published: 2021-01-15T06:25:46 Last Updated: 2024-08-03T19:14:08.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter (which retrieves the contents of the specified file) was found to be accepting malicious user input without proper sanitization, thus leading to retrieval of backend server sensitive files, e.g., /etc/passwd, SQLite database files, PHP source code, etc. Additional Analyst Notes:
ackend server sensitive files, e.g., /etc/passwd, SQLite database files, PHP source code, etc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS - https://sec-consult.com/vulnerability-lab/ - http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2021-23836 State: PUBLISHED Published: 2021-01-15T06:26:46 Last Updated: 2024-08-03T19:14:09.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject malicious client-side script into the affected parameter without any form of input sanitization. The injected payload will be executed in the browser of a user whenever one visits the affected module page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS - https://sec-consu
ional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS - https://sec-consult.com/vulnerability-lab/ - http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2021-23837 State: PUBLISHED Published: 2021-01-15T06:27:23 Last Updated: 2024-08-03T19:14:09.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accepting malicious user input without proper sanitization, thus leading to SQL injection. Database related information can be successfully retrieved. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCo
cessfully retrieved. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS - https://sec-consult.com/vulnerability-lab/ - http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2021-23838 State: PUBLISHED Published: 2021-01-15T06:27:45 Last Updated: 2024-08-03T19:14:09.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request body parameter for the acp interface. The affected parameter accepts malicious client-side script without proper input sanitization. For example, a malicious user can leverage this vulnerability to steal cookies from a victim user and perform a session-hijacking attack, which may then lead to unauthorized access to the site. Additional Analyst Notes: - CVE Program Container: References: - h
ich may then lead to unauthorized access to the site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS - https://sec-consult.com/vulnerability-lab/ - http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html
CVE ID: CVE-2021-23839 State: PUBLISHED Published: 2021-02-16T16:55:17.519714Z Last Updated: 2024-09-17T03:59:18.791Z Vendors: OpenSSL Products: OpenSSL Problem Types: Rollback attack Description: OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, becau
than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0
reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Alth
ing_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0
s of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20210216.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20210219-0009/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.ora
et/articles/Pulse_Security_Advisories/SA44846 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-23840 State: PUBLISHED Published: 2021-02-16T16:55:18.192713Z Last Updated: 2024-09-17T02:16:35.124Z Vendors: OpenSSL Products: OpenSSL Problem Types: Overflow Description: Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgr
incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20210216.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb