Cloudanix VulnDB

CVE-2020-1971

Medium · 5.9

CVSS

5.9

EPSS

7.1%

Published

Dec 8, 2020

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A flaw in how certain certificate name fields are compared can make programs crash when they check security information from the internet, potentially interrupting services until fixed.

Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
High
Impact
Denial Of Service
Component
Library
Class
Memory Corruption
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

NULL pointer dereference in GENERAL_NAME_cmp during EDIPartyName comparison in X.509 certificate and CRL handling, resulting in process crash.

Why it matters to the business

Applications performing certificate validation with automatic CRL fetching can experience unplanned outages and loss of availability, particularly in services relying on Perl's OpenSSL bindings; the issue has been public for years with stable low exploitation probability.

How an attack unfolds

An attacker supplies a crafted certificate containing an EDIPartyName and a matching malicious CRL; when the application automatically downloads and compares the CRL distribution point name using GENERAL_NAME_cmp before signature checks, the dereference occurs and crashes the process.

How to fix it

Update perl/perl5 to commit 464b2b3dcc8158f7dee4ec9c9d06bd2f09c40687 or later; rebuild any dependent applications against the patched Perl/OpenSSL stack and disable -crl_download options where feasible until upgraded.

How to confirm the fix worked

Confirm the perl/perl5 commit 464b2b3dcc8158f7dee4ec9c9d06bd2f09c40687 is present in the source tree; test certificate validation paths with crafted EDIPartyName inputs to verify absence of crash.

Typical attack path

  1. Craft certificate and CRL both containing malformed EDIPartyName values
  2. Host the CRL at a URL embedded in the certificate
  3. Trick client or server into fetching the CRL via automatic download mechanisms
  4. Trigger GENERAL_NAME_cmp on the two EDIPartyName structures to induce crash

How to detect it

Search application and TLS logs for crashes during CRL or timestamp response verification; look for processes handling X.509 certificates that terminate unexpectedly when processing untrusted inputs.

What your security team should do

  • Prioritize upgrade of perl/perl5 to the listed fixed commit across all environments
  • Review and restrict use of automatic CRL download features in certificate-handling code
  • Monitor EPSS and KEV status for any future increase in exploitation activity

The record

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).

Affected packages

Ecosystem Package Introduced Fixed
Alpine:v3.10 openssl 0 1.1.1i-r0
Alpine:v3.11 openssl 0 1.1.1i-r0
Alpine:v3.12 openssl 0 1.1.1i-r0
Alpine:v3.13 libressl 0 3.1.5-r0
Alpine:v3.13 openssl 0 1.1.1i-r0
Alpine:v3.14 openssl 0 1.1.1i-r0
Alpine:v3.15 openssl 0 1.1.1i-r0
Alpine:v3.15 openssl3 0 1.1.1i-r0
Alpine:v3.16 openssl 0 1.1.1i-r0
Alpine:v3.16 openssl3 0 1.1.1i-r0
Alpine:v3.17 openssl 0 1.1.1i-r0
Alpine:v3.18 openssl 0 1.1.1i-r0
Alpine:v3.19 openssl 0 1.1.1i-r0
Alpine:v3.20 openssl 0 1.1.1i-r0
Alpine:v3.21 openssl 0 1.1.1i-r0
Alpine:v3.22 openssl 0 1.1.1i-r0
Alpine:v3.9 openssl 0 1.1.1i-r0
Android :unknown: 11:0 11:2021-06-01
Android platform/external/boringssl 11:0 11:2021-06-01
Bitnami node 10.0.0 10.12.0
Bitnami node 10.13.0 10.23.1
Bitnami node-min 10.0.0 10.12.0
Bitnami node-min 10.0.0 10.12.1
Bitnami node-min 10.13.0 10.23.1
Chainguard mysql-8.0 0 8.0.38-r0
Chainguard mysql-8.0-bitnami-compat 0 8.0.38-r0
Chainguard mysql-8.0-client 0 8.0.38-r0
Chainguard mysql-8.0-dev 0 8.0.38-r0
Chainguard mysql-8.0-iamguarded-compat 0 8.0.38-r0
Chainguard mysql-8.0-oci-entrypoint 0 8.0.38-r0
Chainguard mysql-8.0-oci-entrypoint-compat 0 8.0.38-r0
Debian:10 openssl 0 1.1.1d-0+deb10u4
Debian:11 openssl 0 1.1.1i-1
Debian:12 openssl 0 1.1.1i-1
Debian:13 openssl 0 1.1.1i-1
Debian:9 openssl 0 1.1.0l-1~deb9u2
Debian:9 openssl1.0 0 1.0.2u-1~deb9u3
Mageia:7 compat-openssl10 0 1.0.2u-1.1.mga7
Mageia:7 openssl 0 1.1.0l-1.2.mga7
Red Hat:enterprise_linux:7::client openssl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::client openssl-debuginfo 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::client openssl-devel 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::client openssl-libs 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::client openssl-perl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::client openssl-static 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl-debuginfo 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl-devel 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl-libs 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl-perl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::computenode openssl-static 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl-debuginfo 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl-devel 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl-libs 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl-perl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::server openssl-static 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl-debuginfo 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl-devel 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl-libs 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl-perl 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:7::workstation openssl-static 0 1:1.0.2k-21.el7_9
Red Hat:enterprise_linux:8::baseos openssl 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-debuginfo 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-debugsource 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-devel 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-libs 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-libs-debuginfo 0 1:1.1.1g-12.el8_3
Red Hat:enterprise_linux:8::baseos openssl-perl 0 1:1.1.1g-12.el8_3
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-brotli 0 0:1.0.6-40.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-brotli-debuginfo 0 0:1.0.6-40.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-brotli-devel 0 0:1.0.6-40.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-debuginfo 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-devel 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-manual 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-selinux 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-httpd-tools 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native 0 0:1.3.14-16.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native-debuginfo 0 0:1.3.14-16.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_http2 0 0:1.15.7-12.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_http2-debuginfo 0 0:1.15.7-12.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_jk 0 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_jk-ap24 0 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_jk-debuginfo 0 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_jk-manual 0 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_ldap 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_md 0 1:2.0.8-31.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_md-debuginfo 0 1:2.0.8-31.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_proxy_html 0 1:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_security 0 0:2.9.2-58.GA.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_security-debuginfo 0 0:2.9.2-58.GA.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_session 0 0:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-mod_ssl 0 1:2.4.37-66.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-nghttp2 0 0:1.39.2-35.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-nghttp2-debuginfo 0 0:1.39.2-35.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-nghttp2-devel 0 0:1.39.2-35.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-chil 0 0:1.0.0-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-chil-debuginfo 0 0:1.0.0-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-debuginfo 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-devel 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-libs 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-perl 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-pkcs11 0 0:0.4.10-18.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-pkcs11-debuginfo 0 0:0.4.10-18.jbcs.el7
Red Hat:jboss_core_services:1::el7 jbcs-httpd24-openssl-static 0 1:1.1.1g-3.jbcs.el7
Red Hat:jboss_enterprise_web_server:3.1::el7 tomcat-native 0 0:1.2.23-23.redhat_23.ep7.el7
Red Hat:jboss_enterprise_web_server:3.1::el7 tomcat-native-debuginfo 0 0:1.2.23-23.redhat_23.ep7.el7
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-admin-webapps 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-docs-webapp 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-el-3.0-api 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-javadoc 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-jsp-2.3-api 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-lib 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-native 0 0:1.2.25-3.redhat_3.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-native-debuginfo 0 0:1.2.25-3.redhat_3.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-selinux 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-servlet-4.0-api 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el7 jws5-tomcat-webapps 0 0:9.0.36-9.redhat_8.1.el7jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-admin-webapps 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-docs-webapp 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-el-3.0-api 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-javadoc 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-jsp-2.3-api 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-lib 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-native 0 0:1.2.25-3.redhat_3.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-native-debuginfo 0 0:1.2.25-3.redhat_3.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-selinux 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-servlet-4.0-api 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:jboss_enterprise_web_server:5.4::el8 jws5-tomcat-webapps 0 0:9.0.36-9.redhat_8.1.el8jws
Red Hat:rhel_aus:7.2::server openssl 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.2::server openssl-debuginfo 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.2::server openssl-devel 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.2::server openssl-libs 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.2::server openssl-perl 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.2::server openssl-static 0 1:1.0.1e-52.el7_2
Red Hat:rhel_aus:7.3::server openssl 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.3::server openssl-debuginfo 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.3::server openssl-devel 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.3::server openssl-libs 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.3::server openssl-perl 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.3::server openssl-static 0 1:1.0.1e-61.el7_3
Red Hat:rhel_aus:7.4::server openssl 0 1:1.0.2k-9.el7_4
Red Hat:rhel_aus:7.4::server openssl-debuginfo 0 1:1.0.2k-9.el7_4
Red Hat:rhel_aus:7.4::server openssl-devel 0 1:1.0.2k-9.el7_4
Red Hat:rhel_aus:7.4::server openssl-libs 0 1:1.0.2k-9.el7_4
Red Hat:rhel_aus:7.4::server openssl-perl 0 1:1.0.2k-9.el7_4
Red Hat:rhel_aus:7.4::server openssl-static 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl-debuginfo 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl-devel 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl-libs 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl-perl 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:7.4::server openssl-static 0 1:1.0.2k-9.el7_4
Red Hat:rhel_e4s:8.0::baseos openssl 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-debuginfo 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-debugsource 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-devel 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-libs 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-libs-debuginfo 0 1:1.1.1-9.el8_0
Red Hat:rhel_e4s:8.0::baseos openssl-perl 0 1:1.1.1-9.el8_0
Red Hat:rhel_els:6 openssl 0 0:1.0.1e-59.el6_10
Red Hat:rhel_els:6 openssl-debuginfo 0 0:1.0.1e-59.el6_10
Red Hat:rhel_els:6 openssl-devel 0 0:1.0.1e-59.el6_10
Red Hat:rhel_els:6 openssl-perl 0 0:1.0.1e-59.el6_10
Red Hat:rhel_els:6 openssl-static 0 0:1.0.1e-59.el6_10
Red Hat:rhel_eus:7.6::computenode openssl 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::computenode openssl-debuginfo 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::computenode openssl-devel 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::computenode openssl-libs 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::computenode openssl-perl 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::computenode openssl-static 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl-debuginfo 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl-devel 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl-libs 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl-perl 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.6::server openssl-static 0 1:1.0.2k-17.el7_6
Red Hat:rhel_eus:7.7::computenode openssl 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::computenode openssl-debuginfo 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::computenode openssl-devel 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::computenode openssl-libs 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::computenode openssl-perl 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::computenode openssl-static 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl-debuginfo 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl-devel 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl-libs 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl-perl 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:7.7::server openssl-static 0 1:1.0.2k-20.el7_7
Red Hat:rhel_eus:8.1::baseos openssl 0 1:1.1.1c-3.el8_1
Red Hat:rhel_eus:8.1::baseos openssl-debuginfo 0 1:1.1.1c-3.el8_1
Red Hat:rhel_eus:8.1::baseos openssl-debugsource 0 1:1.1.1c-3.el8_1
Red Hat:rhel_eus:8.1::baseos openssl-devel 0 1:1.1.1c-3.el8_1
Red Hat:rhel_eus:8.1::baseos openssl-libs 0 1:1.1.1c-3.el8_1
Red Hat:rhel_eus:8.1::baseos openssl-libs-debuginfo 0 1:1.1.1c-3.el8_1

Related vulnerabilities