{"id":"CVE-2021-3449","title":"An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client","summary":"An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHel…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"openssl","product":"openssl","affected":["openssl >= 1.1.1, < 1.1.1k","debian_linux = 9.0","debian_linux = 10.0","freebsd = 12.2","active_iq_unified_manager","cloud_volumes_ontap_mediator","e-series_performance_analyzer","oncommand_insight","oncommand_workflow_automation","ontap_select_deploy_administration_utility","santricity_smi-s_provider","snapcenter","storagegrid","log_correlation_engine < 6.0.9","nessus <= 8.13.1","nessus_network_monitor = 5.11.0","nessus_network_monitor = 5.11.1","nessus_network_monitor = 5.12.0","nessus_network_monitor = 5.12.1","nessus_network_monitor = 5.13.0","tenable.sc >= 5.13.0, <= 5.17.0","fedora = 34","web_gateway = 8.2.19","web_gateway = 9.2.10","web_gateway = 10.1.1","web_gateway_cloud_service = 8.2.19","web_gateway_cloud_service = 9.2.10","web_gateway_cloud_service = 10.1.1","quantum_security_management_firmware = r80.40","quantum_security_management_firmware = r81","multi-domain_management_firmware = r80.40","multi-domain_management_firmware = r81","quantum_security_gateway_firmware = r80.40","quantum_security_gateway_firmware = r81","communications_communications_policy_management = 12.6.0.0.0","enterprise_manager_for_storage_management = 13.4.0.0","essbase = 21.2","graalvm = 19.3.5","graalvm = 20.3.1.2","graalvm = 21.0.0.2","jd_edwards_enterpriseone_tools < 9.2.6.0","jd_edwards_world_security = a9.4","mysql_connectors <= 8.0.23","mysql_server <= 5.7.33","mysql_server >= 8.0.15, <= 8.0.23","mysql_workbench <= 8.0.23","peoplesoft_enterprise_peopletools = 8.57","peoplesoft_enterprise_peopletools = 8.58","peoplesoft_enterprise_peopletools = 8.59","primavera_unifier >= 17.7, <= 17.12","primavera_unifier = 19.12","primavera_unifier = 20.12","primavera_unifier = 21.12","secure_backup < 18.1.0.1.0","secure_global_desktop = 5.6","zfs_storage_appliance_kit = 8.8","sma100_firmware >= 10.2.0.0, < 10.2.1.0-17sv","capture_client = 3.5","sonicos = 7.0.1.0","ruggedcom_rcm1224_firmware >= 6.2","scalance_lpe9403_firmware","scalance_m-800_firmware >= 6.2","scalance_s602_firmware >= 4.1","scalance_s612_firmware >= 4.1","scalance_s615_firmware >= 6.2","scalance_s623_firmware >= 4.1","scalance_s627-2m_firmware >= 4.1","scalance_sc-600_firmware >= 2.0","scalance_w700_firmware >= 6.5","scalance_w1700_firmware >= 2.0","scalance_xb-200_firmware < 4.3","scalance_xc-200_firmware < 4.3","scalance_xf-200ba_firmware < 4.3","scalance_xm-400_firmware < 6.4","scalance_xp-200_firmware < 4.3","scalance_xr-300wg_firmware < 4.3","scalance_xr524-8c_firmware < 6.4","scalance_xr526-8c_firmware < 6.4","scalance_xr528-6m_firmware < 6.4","scalance_xr552-12_firmware < 6.4","simatic_cloud_connect_7_firmware >= 1.1","simatic_cloud_connect_7_firmware","simatic_cp_1242-7_gprs_v2_firmware >= 3.1","simatic_cp_1242-7_gprs_v2_firmware","simatic_hmi_basic_panels_2nd_generation_firmware","simatic_hmi_comfort_outdoor_panels_firmware","simatic_hmi_ktp_mobile_panels_firmware","simatic_mv500_firmware","simatic_net_cp_1243-1_firmware >= 3.1","simatic_net_cp1243-7_lte_eu_firmware >= 3.1","simatic_net_cp1243-7_lte_us_firmware >= 3.1","simatic_net_cp_1243-8_irc_firmware >= 3.1","simatic_net_cp_1542sp-1_irc_firmware >= 2.1","simatic_net_cp_1543-1_firmware >= 2.2, < 3.0","simatic_net_cp_1543sp-1_firmware >= 2.1","simatic_net_cp_1545-1_firmware >= 1.0","simatic_pcs_7_telecontrol_firmware","simatic_pcs_neo_firmware","simatic_pdm_firmware >= 9.1.0.7","simatic_process_historian_opc_ua_server_firmware >= 2019"],"patched":["openssl 1.1.1k","log_correlation_engine 6.0.9","jd_edwards_enterpriseone_tools 9.2.6.0","secure_backup 18.1.0.1.0","sma100_firmware 10.2.1.0-17sv","scalance_xb-200_firmware 4.3","scalance_xc-200_firmware 4.3","scalance_xf-200ba_firmware 4.3","scalance_xm-400_firmware 6.4","scalance_xp-200_firmware 4.3","scalance_xr-300wg_firmware 4.3","scalance_xr524-8c_firmware 6.4","scalance_xr526-8c_firmware 6.4","scalance_xr528-6m_firmware 6.4","scalance_xr552-12_firmware 6.4","simatic_net_cp_1543-1_firmware 3.0"],"published":"2021-03-25","updated":"2026-10-08","sourceUpdated":"2026-10-08T22:17:11.243","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-3449","references":[{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","label":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","label":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","label":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","label":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"openssl-security@openssl.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf","label":"openssl-security@openssl.org"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148","label":"openssl-security@openssl.org"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","label":"openssl-security@openssl.org"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","label":"openssl-security@openssl.org"},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html","label":"openssl-security@openssl.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","label":"openssl-security@openssl.org"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","label":"openssl-security@openssl.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","label":"openssl-security@openssl.org"},{"url":"https://security.gentoo.org/glsa/202103-03","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","label":"openssl-security@openssl.org"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","label":"openssl-security@openssl.org"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","label":"openssl-security@openssl.org"},{"url":"https://www.debian.org/security/2021/dsa-4875","label":"openssl-security@openssl.org"},{"url":"https://www.openssl.org/news/secadv/20210325.txt","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"openssl-security@openssl.org"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2021-05","label":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2021-06","label":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2021-09","label":"openssl-security@openssl.org"},{"url":"https://www.tenable.com/security/tns-2021-10","label":"openssl-security@openssl.org"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/27/2","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/3","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2021/03/28/4","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10356","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202103-03","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210326-0006/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210513-0002/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0006/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2021/dsa-4875","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.openssl.org/news/secadv/20210325.txt","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2021-05","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2021-06","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2021-09","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2021-10","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.63542,"epssPercentile":0.99195,"exploits":{"github":1,"githubRepos":["https://github.com/riptl/cve-2021-3449"],"checkedAt":"2026-10-08T23:17:21.750Z"},"exploitAvailable":true,"ingestedAt":"2026-10-08T23:16:47.316Z","slug":"CVE-2021-3449","body":"## Overview\n\nAn OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).\n\n## Affected\n\n- `openssl >= 1.1.1, < 1.1.1k`\n- `debian_linux = 9.0`\n- `debian_linux = 10.0`\n- `freebsd = 12.2`\n- `active_iq_unified_manager`\n- `cloud_volumes_ontap_mediator`\n- `e-series_performance_analyzer`\n- `oncommand_insight`\n- `oncommand_workflow_automation`\n- `ontap_select_deploy_administration_utility`\n- `santricity_smi-s_provider`\n- `snapcenter`\n- `storagegrid`\n- `log_correlation_engine < 6.0.9`\n- `nessus <= 8.13.1`\n- `nessus_network_monitor = 5.11.0`\n- `nessus_network_monitor = 5.11.1`\n- `nessus_network_monitor = 5.12.0`\n- `nessus_network_monitor = 5.12.1`\n- `nessus_network_monitor = 5.13.0`\n- `tenable.sc >= 5.13.0, <= 5.17.0`\n- `fedora = 34`\n- `web_gateway = 8.2.19`\n- `web_gateway = 9.2.10`\n- `web_gateway = 10.1.1`\n- `web_gateway_cloud_service = 8.2.19`\n- `web_gateway_cloud_service = 9.2.10`\n- `web_gateway_cloud_service = 10.1.1`\n- `quantum_security_management_firmware = r80.40`\n- `quantum_security_management_firmware = r81`\n- `multi-domain_management_firmware = r80.40`\n- `multi-domain_management_firmware = r81`\n- `quantum_security_gateway_firmware = r80.40`\n- `quantum_security_gateway_firmware = r81`\n- `communications_communications_policy_management = 12.6.0.0.0`\n- `enterprise_manager_for_storage_management = 13.4.0.0`\n- `essbase = 21.2`\n- `graalvm = 19.3.5`\n- `graalvm = 20.3.1.2`\n- `graalvm = 21.0.0.2`\n- `jd_edwards_enterpriseone_tools < 9.2.6.0`\n- `jd_edwards_world_security = a9.4`\n- `mysql_connectors <= 8.0.23`\n- `mysql_server <= 5.7.33`\n- `mysql_server >= 8.0.15, <= 8.0.23`\n- `mysql_workbench <= 8.0.23`\n- `peoplesoft_enterprise_peopletools = 8.57`\n- `peoplesoft_enterprise_peopletools = 8.58`\n- `peoplesoft_enterprise_peopletools = 8.59`\n- `primavera_unifier >= 17.7, <= 17.12`\n- `primavera_unifier = 19.12`\n- `primavera_unifier = 20.12`\n- `primavera_unifier = 21.12`\n- `secure_backup < 18.1.0.1.0`\n- `secure_global_desktop = 5.6`\n- `zfs_storage_appliance_kit = 8.8`\n- `sma100_firmware >= 10.2.0.0, < 10.2.1.0-17sv`\n- `capture_client = 3.5`\n- `sonicos = 7.0.1.0`\n- `ruggedcom_rcm1224_firmware >= 6.2`\n- `scalance_lpe9403_firmware`\n- `scalance_m-800_firmware >= 6.2`\n- `scalance_s602_firmware >= 4.1`\n- `scalance_s612_firmware >= 4.1`\n- `scalance_s615_firmware >= 6.2`\n- `scalance_s623_firmware >= 4.1`\n- `scalance_s627-2m_firmware >= 4.1`\n- `scalance_sc-600_firmware >= 2.0`\n- `scalance_w700_firmware >= 6.5`\n- `scalance_w1700_firmware >= 2.0`\n- `scalance_xb-200_firmware < 4.3`\n- `scalance_xc-200_firmware < 4.3`\n- `scalance_xf-200ba_firmware < 4.3`\n- `scalance_xm-400_firmware < 6.4`\n- `scalance_xp-200_firmware < 4.3`\n- `scalance_xr-300wg_firmware < 4.3`\n- `scalance_xr524-8c_firmware < 6.4`\n- `scalance_xr526-8c_firmware < 6.4`\n- `scalance_xr528-6m_firmware < 6.4`\n- `scalance_xr552-12_firmware < 6.4`\n- `simatic_cloud_connect_7_firmware >= 1.1`\n- `simatic_cloud_connect_7_firmware`\n- `simatic_cp_1242-7_gprs_v2_firmware >= 3.1`\n- `simatic_cp_1242-7_gprs_v2_firmware`\n- `simatic_hmi_basic_panels_2nd_generation_firmware`\n- `simatic_hmi_comfort_outdoor_panels_firmware`\n- `simatic_hmi_ktp_mobile_panels_firmware`\n- `simatic_mv500_firmware`\n- `simatic_net_cp_1243-1_firmware >= 3.1`\n- `simatic_net_cp1243-7_lte_eu_firmware >= 3.1`\n- `simatic_net_cp1243-7_lte_us_firmware >= 3.1`\n- `simatic_net_cp_1243-8_irc_firmware >= 3.1`\n- `simatic_net_cp_1542sp-1_irc_firmware >= 2.1`\n- `simatic_net_cp_1543-1_firmware >= 2.2, < 3.0`\n- `simatic_net_cp_1543sp-1_firmware >= 2.1`\n- `simatic_net_cp_1545-1_firmware >= 1.0`\n- `simatic_pcs_7_telecontrol_firmware`\n- `simatic_pcs_neo_firmware`\n- `simatic_pdm_firmware >= 9.1.0.7`\n- `simatic_process_historian_opc_ua_server_firmware >= 2019`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `openssl 1.1.1k`\n- `log_correlation_engine 6.0.9`\n- `jd_edwards_enterpriseone_tools 9.2.6.0`\n- `secure_backup 18.1.0.1.0`\n- `sma100_firmware 10.2.1.0-17sv`\n- `scalance_xb-200_firmware 4.3`\n- `scalance_xc-200_firmware 4.3`\n- `scalance_xf-200ba_firmware 4.3`\n- `scalance_xm-400_firmware 6.4`\n- `scalance_xp-200_firmware 4.3`\n- `scalance_xr-300wg_firmware 4.3`\n- `scalance_xr524-8c_firmware 6.4`\n- `scalance_xr526-8c_firmware 6.4`\n- `scalance_xr528-6m_firmware 6.4`\n- `scalance_xr552-12_firmware 6.4`\n- `simatic_net_cp_1543-1_firmware 3.0`","depth":"twilight","depthScore":57,"depthScoreParts":{"impact":32.5,"likelihood":12.7,"exploitation":12,"ransomware":0},"changes":[]}