Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2021-23841

NULL Pointer Dereference

Published: Feb 16, 2021 | Modified: Nov 21, 2024
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2021-23841
CWEhttps://cwe.mitre.org/data/definitions/476.html

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
OpensslOpenssl1.0.2 (including)1.0.2y (excluding)
OpensslOpenssl1.1.1 (including)1.1.1j (excluding)
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-apr-0:1.6.3-107.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-apr-util-0:1.6.1-84.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-curl-0:7.78.0-2.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-httpd-0:2.4.37-78.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-mod_cluster-native-0:1.3.16-9.Final_redhat_2.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-mod_http2-0:1.15.7-21.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-mod_jk-0:1.2.48-20.redhat_1.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-mod_md-1:2.0.8-40.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-mod_security-0:2.9.2-67.GA.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-nghttp2-0:1.39.2-39.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-openssl-1:1.1.1g-8.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-openssl-chil-0:1.0.0-7.el8jbcs*
JBoss Core Services for RHEL 8RedHatjbcs-httpd24-openssl-pkcs11-0:0.4.10-22.el8jbcs*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-apr-0:1.6.3-107.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-apr-util-0:1.6.1-84.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-curl-0:7.78.0-2.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-httpd-0:2.4.37-78.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-mod_cluster-native-0:1.3.16-9.Final_redhat_2.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-mod_http2-0:1.15.7-21.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-mod_jk-0:1.2.48-20.redhat_1.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-mod_md-1:2.0.8-40.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-mod_security-0:2.9.2-67.GA.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-nghttp2-0:1.39.2-39.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-openssl-1:1.1.1g-8.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-openssl-chil-0:1.0.0-7.jbcs.el7*
JBoss Core Services on RHEL 7RedHatjbcs-httpd24-openssl-pkcs11-0:0.4.10-22.jbcs.el7*
Red Hat Enterprise Linux 7RedHatopenssl-1:1.0.2k-22.el7_9*
Red Hat Enterprise Linux 8RedHatedk2-0:20210527gite1999b264f1f-3.el8*
Red Hat Enterprise Linux 8RedHatopenssl-1:1.1.1k-4.el8*
Red Hat JBoss Web Server 5RedHat*
Red Hat JBoss Web Server 5.6 on RHEL 7RedHatjws5-tomcat-0:9.0.50-3.redhat_00004.1.el7jws*
Red Hat JBoss Web Server 5.6 on RHEL 7RedHatjws5-tomcat-native-0:1.2.30-3.redhat_3.el7jws*
Red Hat JBoss Web Server 5.6 on RHEL 7RedHatjws5-tomcat-vault-0:1.1.8-4.Final_redhat_00004.1.el7jws*
Red Hat JBoss Web Server 5.6 on RHEL 8RedHatjws5-tomcat-0:9.0.50-3.redhat_00004.1.el8jws*
Red Hat JBoss Web Server 5.6 on RHEL 8RedHatjws5-tomcat-native-0:1.2.30-3.redhat_3.el8jws*
Red Hat JBoss Web Server 5.6 on RHEL 8RedHatjws5-tomcat-vault-0:1.1.8-4.Final_redhat_00004.1.el8jws*
Text-Only JBCSRedHatjbcs-httpd24-openssl*
Edk2Ubuntutrusty*
NodejsUbuntutrusty*
OpensslUbuntubionic*
OpensslUbuntudevel*
OpensslUbuntuesm-infra-legacy/trusty*
OpensslUbuntuesm-infra/bionic*
OpensslUbuntuesm-infra/focal*
OpensslUbuntuesm-infra/xenial*
OpensslUbuntufocal*
OpensslUbuntugroovy*
OpensslUbuntutrusty*
OpensslUbuntutrusty/esm*
OpensslUbuntuupstream*
OpensslUbuntuxenial*
Openssl1.0Ubuntubionic*
Openssl1.0Ubuntuesm-infra/bionic*
Openssl1.0Ubuntuupstream*

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use