CVE-2021-23839
OpenSSL SSLv2 Version Rollback (Note: I've followed your instructions to write only one title and not to mention version information and/or parameter)
Description
OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x).
INFO
Published Date :
Feb. 16, 2021, 5:15 p.m.
Last Modified :
June 21, 2024, 7:15 p.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
1.4
Exploitability Score :
2.2
Public PoC/Exploit Available at Github
CVE-2021-23839 has a 11 public PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
Affected Products
The following products are affected by CVE-2021-23839
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2021-23839.
| URL | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf | Patch Third Party Advisory |
| https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547 | |
| https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210219-0009/ | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20240621-0006/ | |
| https://www.openssl.org/news/secadv/20210216.txt | Vendor Advisory |
| https://www.oracle.com//security-alerts/cpujul2021.html | Patch Third Party Advisory |
| https://www.oracle.com/security-alerts/cpuApr2021.html | Patch Third Party Advisory |
| https://www.oracle.com/security-alerts/cpuapr2022.html | Patch Third Party Advisory |
| https://www.oracle.com/security-alerts/cpuoct2021.html | Patch Third Party Advisory |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Based in https://github.com/arindam0310018/04-Apr-2022-DevOps__Scan-Images-In-ACR-Using-Trivy
Dockerfile HTML
Demo repository showcasing some of the possibilities of Aqua Trivy.
cncf-demo trivy
Dockerfile Shell
None
A security framework by Aquasecurity
DEVOPS + ACR + TRIVY
azure azurecontainerregistry devops devops-pipeline powershell
Dockerfile HTML
本项目旨在解决openssl1.0.2u的漏洞问题。（1.0.2官方不在维护，所以，相关的漏洞修复代码都已经闭源，此处是从相近版本合入的代码， 源码来源：https://github.com/openssl/openssl/tree/OpenSSL_1_0_2u）
Shell C++ C Batchfile Perl DIGITAL Command Language Makefile Assembly XS M4
此仓库已停止维护，请移步https://github.com/jntass/TASSL-1.1.1
Perl DIGITAL Command Language C Shell Assembly M4 eC Python C++ sed
None
Go
CVE Checker
Python
Automatic monitor github cve using Github Actions
Python
Docker/K8s Engine Microservice using Go kit and Gorilla (Go Web Toolkit Toolkit). Project includes K8s packages for K8s-YAML, K8s-Helm3 and K8s-Kustomize
Dockerfile Go Makefile Smarty
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2021-23839 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2021-23839 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by [email protected]
Jun. 21, 2024
Action Type Old Value New Value Added Reference OpenSSL Software Foundation https://security.netapp.com/advisory/ntap-20240621-0006/ [No types assigned] -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
Nov. 07, 2023
Action Type Old Value New Value Added Reference OpenSSL Software Foundation https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547 [No types assigned] Removed Reference OpenSSL Software Foundation https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=30919ab80a478f2d81f2e9acdcca3fa4740cd547 -
CWE Remap by [email protected]
Aug. 08, 2023
Action Type Old Value New Value Changed CWE CWE-326 CWE-327 -
Modified Analysis by [email protected]
Oct. 29, 2022
Action Type Old Value New Value Changed Reference Type https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf No Types Assigned https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf Patch, Third Party Advisory Added CPE Configuration OR *cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:* versions up to (excluding) 1.0 *cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:* *cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:* -
CVE Modified by [email protected]
Sep. 13, 2022
Action Type Old Value New Value Added Reference https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf [No Types Assigned] -
CPE Deprecation Remap by [email protected]
Sep. 12, 2022
Action Type Old Value New Value Changed CPE Configuration OR *cpe:2.3:a:oracle:manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* OR *cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* -
Modified Analysis by [email protected]
May. 12, 2022
Action Type Old Value New Value Changed Reference Type https://www.oracle.com/security-alerts/cpuapr2022.html No Types Assigned https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory Changed CPE Configuration OR *cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* OR *cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* -
CVE Modified by [email protected]
Apr. 20, 2022
Action Type Old Value New Value Added Reference https://www.oracle.com/security-alerts/cpuapr2022.html [No Types Assigned] -
Modified Analysis by [email protected]
Dec. 10, 2021
Action Type Old Value New Value Changed Reference Type https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846 No Types Assigned https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846 Third Party Advisory Changed Reference Type https://www.oracle.com//security-alerts/cpujul2021.html No Types Assigned https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory Changed Reference Type https://www.oracle.com/security-alerts/cpuoct2021.html No Types Assigned https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory Changed CPE Configuration OR *cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:* OR *cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:* *cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:* -
CVE Modified by [email protected]
Oct. 20, 2021
Action Type Old Value New Value Added Reference https://www.oracle.com/security-alerts/cpuoct2021.html [No Types Assigned] -
CVE Modified by [email protected]
Jul. 20, 2021
Action Type Old Value New Value Added Reference https://www.oracle.com//security-alerts/cpujul2021.html [No Types Assigned] -
CVE Modified by [email protected]
Jul. 14, 2021
Action Type Old Value New Value Added Reference https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846 [No Types Assigned] -
Modified Analysis by [email protected]
Jun. 17, 2021
Action Type Old Value New Value Changed Reference Type https://www.oracle.com/security-alerts/cpuApr2021.html No Types Assigned https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory Added CPE Configuration OR *cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* *cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:* *cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:* *cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:* -
CVE Modified by [email protected]
Jun. 14, 2021
Action Type Old Value New Value Added Reference https://www.oracle.com/security-alerts/cpuApr2021.html [No Types Assigned] -
Reanalysis by [email protected]
Mar. 10, 2021
Action Type Old Value New Value Removed CVSS V2 NIST (AV:N/AC:L/Au:N/C:N/I:P/A:N) Added CVSS V2 NIST (AV:N/AC:M/Au:N/C:N/I:P/A:N) Removed CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Added CVSS V3.1 NIST AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N -
Initial Analysis by [email protected]
Feb. 24, 2021
Action Type Old Value New Value Added CVSS V2 NIST (AV:N/AC:L/Au:N/C:N/I:P/A:N) Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Changed Reference Type https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=30919ab80a478f2d81f2e9acdcca3fa4740cd547 No Types Assigned https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=30919ab80a478f2d81f2e9acdcca3fa4740cd547 Broken Link Changed Reference Type https://security.netapp.com/advisory/ntap-20210219-0009/ No Types Assigned https://security.netapp.com/advisory/ntap-20210219-0009/ Third Party Advisory Changed Reference Type https://www.openssl.org/news/secadv/20210216.txt No Types Assigned https://www.openssl.org/news/secadv/20210216.txt Vendor Advisory Added CWE NIST CWE-326 Added CPE Configuration OR *cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* versions from (including) 1.0.2s up to (including) 1.0.2x -
CVE Modified by [email protected]
Feb. 19, 2021
Action Type Old Value New Value Added Reference https://security.netapp.com/advisory/ntap-20210219-0009/ [No Types Assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2021-23839 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2021-23839
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
0.20 }} 0.00%
score
0.57644
percentile