CVE-2021-3449 OpenSSL
| Affected software | OpenSSL |
|---|---|
| Severity | 5.9 Medium CVSS 3.1 2 scores |
| Weakness | CWE-476 |
| Published | 25 Mar 2021 |
| Updated | 8 Oct 2026 |
Description
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Exploitation status
Proof of concept only
A proof of concept exists, but no reviewed exploit catalogue lists this CVE.
Exploitation status
- CISA KEV not listed
- VulnCheck KEV not listed
- CISA Vulnrichment exploitation: none
- Indexed PoC 1 indexed Published artifacts you can open, in GitHub PoC; first seen 2021-03-26.
- EPSS 64% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99% of all scored CVEs.
| Index | Artifact | Stars | First seen |
|---|---|---|---|
| GitHub PoC | CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻💻 | 223 | 2021-03-26 |
Waratek protection
A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.
- Protection none
- Action not pursued none
- Review human Researcher
- Record active
| Decided by | Manual classification of this CVE in the legacy dataset |
|---|---|
| Finding | A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product. |
CVSS
5.9 MEDIUM
v3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
2 metrics
CVSS
5.9 MEDIUM v3.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
2 metrics
We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.
| Version | Score | Band | Vector | Assigner | Type | |
|---|---|---|---|---|---|---|
| CVSS 3.1 | 5.9 | MEDIUM | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
NVD | Primary | published |
| CVSS 2.0 | 4.3 | none | AV:N/AC:M/Au:N/C:N/I:N/A:P |
NVD | Primary |
Affected software and releases
Oracle advisories
| Advisory | Type | Quarter | Products Oracle names in its risk matrix |
|---|---|---|---|
| Oracle Critical Patch Update April 2021 ↗ | CPU | 2021-Q2 | Oracle MySQL / Server: Packaging (OpenSSL) (5.7.33 and prior, 8.0.23 and prior) |
Oracle components and versions
| Family | Component | Versions, as Oracle lists them | Read as |
|---|---|---|---|
| Oracle MySQL | Server: Packaging (OpenSSL) | 5.7.33 and prior, 8.0.23 and prior |
Products and versions
106 products, 142 version entries| Source | Vendor | Product | Scheme | Affected versions |
|---|---|---|---|---|
| nvd | checkpoint | multi-domain management firmware | generic | r80.40 · r81 |
| nvd | checkpoint | quantum security gateway firmware | generic | r80.40 · r81 |
| nvd | checkpoint | quantum security management firmware | generic | r80.40 · r81 |
| nvd | debian | debian linux | generic | 9.0 · 10.0 |
| nvd | fedoraproject | fedora | generic | 34 |
| nvd | freebsd | freebsd | generic | 12.2 · 12.2:p1 · 12.2:p2 |
| nvd | mcafee | web gateway | generic | 8.2.19 · 9.2.10 · 10.1.1 |
| nvd | mcafee | web gateway cloud service | generic | 8.2.19 · 9.2.10 · 10.1.1 |
| nvd | netapp | active iq unified manager | generic | any version |
| nvd | netapp | cloud volumes ontap mediator | generic | any version |
| nvd | netapp | e-series performance analyzer | generic | any version |
| nvd | netapp | oncommand insight | generic | any version |
| nvd | netapp | oncommand workflow automation | generic | any version |
| nvd | netapp | ontap select deploy administration utility | generic | any version |
| nvd | netapp | santricity smi-s provider | generic | any version |
| nvd | netapp | snapcenter | generic | any version |
| nvd | netapp | storagegrid | generic | any version |
| nvd | nodejs | node.js | generic | ≥ 10.0.0 and ≤ 10.12.0 · ≥ 10.13.0 and ≤ 10.24.0 · ≥ 12.0.0 and ≤ 12.12.0 · ≥ 12.13.0 and ＜ 12.22.1 · ≥ 14.0.0 and ≤ 14.14.0 · ≥ 14.15.0 and ＜ 14.16.1 · ≥ 15.0.0 and ＜ 15.14.0 |
| nvd | openssl | openssl | generic | ≥ 1.1.1 and ＜ 1.1.1 |
| nvd | oracle | communications communications policy management | generic | 12.6.0.0.0 |
| nvd | oracle | enterprise manager for storage management | generic | 13.4.0.0 |
| nvd | oracle | essbase | generic | 21.2 |
| nvd | oracle | graalvm | javase | 19.3.5 · 20.3.1.2 · 21.0.0.2 |
| nvd | oracle | jd edwards enterpriseone tools | generic | ＜ 9.2.6.0 |
| nvd | oracle | jd edwards world security | generic | a9.4 |
| nvd | oracle | mysql connectors | generic | ≤ 8.0.23 |
| nvd | oracle | mysql server | generic | ≤ 5.7.33 · ≥ 8.0.15 and ≤ 8.0.23 |
| nvd | oracle | mysql workbench | generic | ≤ 8.0.23 |
| nvd | oracle | peoplesoft enterprise peopletools | generic | 8.57 · 8.58 · 8.59 |
| nvd | oracle | primavera unifier | generic | ≥ 17.7 and ≤ 17.12 · 19.12 · 20.12 · 21.12 |
| nvd | oracle | secure backup | generic | ＜ 18.1.0.1.0 |
| nvd | oracle | secure global desktop | generic | 5.6 |
| nvd | oracle | zfs storage appliance kit | generic | 8.8 |
| nvd | siemens | ruggedcom rcm1224 firmware | generic | ≥ 6.2 |
| nvd | siemens | scalance lpe9403 firmware | generic | any version |
| nvd | siemens | scalance m-800 firmware | generic | ≥ 6.2 |
| nvd | siemens | scalance s602 firmware | generic | ≥ 4.1 |
| nvd | siemens | scalance s612 firmware | generic | ≥ 4.1 |
| nvd | siemens | scalance s615 firmware | generic | ≥ 6.2 |
| nvd | siemens | scalance s623 firmware | generic | ≥ 4.1 |
| nvd | siemens | scalance s627-2m firmware | generic | ≥ 4.1 |
| nvd | siemens | scalance sc-600 firmware | generic | ≥ 2.0 |
| nvd | siemens | scalance w1700 firmware | generic | ≥ 2.0 |
| nvd | siemens | scalance w700 firmware | generic | ≥ 6.5 |
| nvd | siemens | scalance xb-200 firmware | generic | ＜ 4.3 |
| nvd | siemens | scalance xc-200 firmware | generic | ＜ 4.3 |
| nvd | siemens | scalance xf-200ba firmware | generic | ＜ 4.3 |
| nvd | siemens | scalance xm-400 firmware | generic | ＜ 6.4 |
| nvd | siemens | scalance xp-200 firmware | generic | ＜ 4.3 |
| nvd | siemens | scalance xr-300wg firmware | generic | ＜ 4.3 |
| nvd | siemens | scalance xr524-8c firmware | generic | ＜ 6.4 |
| nvd | siemens | scalance xr526-8c firmware | generic | ＜ 6.4 |
| nvd | siemens | scalance xr528-6m firmware | generic | ＜ 6.4 |
| nvd | siemens | scalance xr552-12 firmware | generic | ＜ 6.4 |
| nvd | siemens | simatic cloud connect 7 firmware | generic | any version · ≥ 1.1 |
| nvd | siemens | simatic cp 1242-7 gprs v2 firmware | generic | any version · ≥ 3.1 |
| nvd | siemens | simatic hmi basic panels 2nd generation firmware | generic | any version |
| nvd | siemens | simatic hmi comfort outdoor panels firmware | generic | any version |
| nvd | siemens | simatic hmi ktp mobile panels firmware | generic | any version |
| nvd | siemens | simatic logon | generic | 1.5:sp3_update_1 · ≥ 1.6.0.2 |
| nvd | siemens | simatic mv500 firmware | generic | any version |
| nvd | siemens | simatic net cp 1243-1 firmware | generic | ≥ 3.1 |
| nvd | siemens | simatic net cp 1243-8 irc firmware | generic | ≥ 3.1 |
| nvd | siemens | simatic net cp 1542sp-1 irc firmware | generic | ≥ 2.1 |
| nvd | siemens | simatic net cp 1543-1 firmware | generic | ≥ 2.2 and ＜ 3.0 |
| nvd | siemens | simatic net cp 1543sp-1 firmware | generic | ≥ 2.1 |
| nvd | siemens | simatic net cp 1545-1 firmware | generic | ≥ 1.0 |
| nvd | siemens | simatic net cp1243-7 lte eu firmware | generic | ≥ 3.1 |
| nvd | siemens | simatic net cp1243-7 lte us firmware | generic | ≥ 3.1 |
| nvd | siemens | simatic pcs 7 telecontrol firmware | generic | any version |
| nvd | siemens | simatic pcs neo firmware | generic | any version |
| nvd | siemens | simatic pdm firmware | generic | ≥ 9.1.0.7 |
| nvd | siemens | simatic process historian opc ua server firmware | generic | ≥ 2019 |
| nvd | siemens | simatic rf166c firmware | generic | any version |
| nvd | siemens | simatic rf185c firmware | generic | any version |
| nvd | siemens | simatic rf186c firmware | generic | any version |
| nvd | siemens | simatic rf186ci firmware | generic | any version |
| nvd | siemens | simatic rf188c firmware | generic | any version |
| nvd | siemens | simatic rf188ci firmware | generic | any version |
| nvd | siemens | simatic rf360r firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1211c firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1212c firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1212fc firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1214 fc firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1214c firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1215 fc firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1215c firmware | generic | any version |
| nvd | siemens | simatic s7-1200 cpu 1217c firmware | generic | any version |
| nvd | siemens | simatic s7-1500 cpu 1518-4 pn\/dp mfp firmware | generic | any version |
| nvd | siemens | simatic wincc runtime advanced | generic | any version |
| nvd | siemens | simatic wincc telecontrol | generic | any version |
| nvd | siemens | sinamics connect 300 firmware | generic | any version |
| nvd | siemens | sinec infrastructure network services | generic | ＜ 1.0.1.1 |
| nvd | siemens | sinec nms | generic | 1.0 · 1.0:sp1 |
| nvd | siemens | sinec pni | generic | any version |
| nvd | siemens | sinema server | generic | 14.0 · 14.0:sp1 · 14.0:sp2 · 14.0:sp2_update1 · 14.0:sp2_update2 |
| nvd | siemens | sinumerik opc ua server | generic | any version |
| nvd | siemens | tia administrator | generic | any version |
| nvd | siemens | tim 1531 irc firmware | generic | ≥ 2.0 and ＜ 2.2 |
| nvd | sonicwall | capture client | generic | 3.5 |
| nvd | sonicwall | sma100 firmware | generic | ≥ 10.2.0.0 and ＜ 10.2.1.0.17 |
| nvd | sonicwall | sonicos | generic | 7.0.1.0 |
| nvd | tenable | log correlation engine | generic | ＜ 6.0.9 |
| nvd | tenable | nessus | generic | ≤ 8.13.1 |
| nvd | tenable | nessus network monitor | generic | 5.11.0 · 5.11.1 · 5.12.0 · 5.12.1 · 5.13.0 |
| nvd | tenable | tenable.sc | generic | ≥ 5.13.0 and ≤ 5.17.0 |
Earlier manual review
A reviewer classified this CVE in an older dataset. We kept the labels and products below, but not the reviewer's reasoning.
## Manual Classification Context **Labels:** MYSQL PROTOCOL, NO AUTH REMOTE EXPLOIT, SERVER: PACKAGING (OPENSSL) **Products:** MYSQL SERVER, OPENSSL, ORACLE MYSQL
References
| URL | Tags |
|---|---|
| http://www.openwall.com/lists/oss-security/2021/03/27/1 | Mailing List, Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2021/03/27/2 | Mailing List, Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2021/03/28/3 | Mailing List, Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2021/03/28/4 | Mailing List, Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf | Third Party Advisory |
| https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf | Patch, Third Party Advisory |
| https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148 | |
| https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845 | Third Party Advisory |
| https://kc.mcafee.com/corporate/index?page=content&id=SB10356 | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html | Mailing List, Third Party Advisory |
Timeline
Timeline
| Published | 2021-03-25 | By the CVE Program. |
|---|---|---|
| NVD record modified | 2026-10-08 | NVD's own last-modified date for this record. |