CVE-2020-1967
published 2020-04-21CVE-2020-1967: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a…
PriorityP356high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
53.34%
98.9th percentile
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
Affected
38 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | openssl | < openssl 1.1.1g-1 (bookworm) | openssl 1.1.1g-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| freebsd | freebsd | — | — |
| jdedwards | enterpriseone | < 9.2.5.0 | 9.2.5.0 |
| netapp | active_iq_unified_manager | >= 7.3 | — |
| netapp | active_iq_unified_manager | >= 9.5 | — |
| openssl | openssl | — | — |
| openssl | openssl | >= 0 < 1.1.1g-1 | 1.1.1g-1 |
| openssl | openssl | >= 0 < 1.1.1g-1 | 1.1.1g-1 |
| openssl | openssl | >= 0 < 1.1.1g-1 | 1.1.1g-1 |
| openssl | openssl | >= 0 < 1.1.1g-1 | 1.1.1g-1 |
| openssl | openssl | 1.1.1d – 1.1.1f | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
| oracle | application_server | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | enterprise_manager_for_storage_management | — | — |
| oracle | enterprise_manager_for_storage_management | — | — |
| oracle | enterprise_manager_ops_center | — | — |
| oracle | http_server | — | — |
| oracle | jd_edwards_world_security | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Trigger condition: crash occurs when an invalid or unrecognised signature algorithm is received from the peer via the 'signature_algorithms_cert' TLS extension during or after a TLS 1.3 handshake, causing a NULL pointer dereference in SSL_check_chain() ↗
- →Vulnerable code path: SSL_check_chain() is not called directly from libssl but may be invoked inside a callback (e.g., client_hello or cert callback); monitor for crashes/segfaults in OpenSSL-linked processes during TLS 1.3 negotiation ↗
- →Scope limited to TLS 1.3 only; TLS 1.2 and earlier are not affected — filter TLS 1.3 handshake traffic for malformed signature_algorithms_cert extensions as a detection focus ↗
- →A public PoC was published for this vulnerability; monitor for exploitation attempts against services using OpenSSL 1.1.1d–1.1.1f ↗
- ·Only OpenSSL versions 1.1.1d, 1.1.1e, and 1.1.1f are affected; versions prior to 1.1.1d are NOT vulnerable ↗
- ·Applications that do not invoke SSL_check_chain() are not vulnerable, even if compiled against an affected OpenSSL version ↗
- ·The flaw was introduced by a specific OpenSSL commit (5235ef44b93306a14d0b6c695b13c64b16e1fdec) shipped with OpenSSL 1.1.1d; patched in OpenSSL 1.1.1g ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv7.5HIGH
vendor_debian7.5HIGH
vendor_oracle7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Null pointer deference in openssl-src
osv·2021-08-25
CVE-2020-1967 [HIGH] Null pointer deference in openssl-src
Null pointer deference in openssl-src
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
GHSA
Null pointer deference in openssl-src
ghsa·2021-08-25
CVE-2020-1967 [HIGH] CWE-476 Null pointer deference in openssl-src
Null pointer deference in openssl-src
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
OSV
Crash causing Denial of Service attack
osv·2020-04-25
CVE-2020-1967 Crash causing Denial of Service attack
Crash causing Denial of Service attack
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3
handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the
"signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature
algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of
Service attack.
OSV
CVE-2020-1967: Server or client applications that call the SSL_check_chain() function during or after a TLS 1
osv·2020-04-21·CVSS 7.5
CVE-2020-1967 [HIGH] CVE-2020-1967: Server or client applications that call the SSL_check_chain() function during or after a TLS 1
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
CISA ICS
Siemens SIDIS Prime
cisa_ics·2024-02-15·CVSS 7.4
[HIGH] Siemens SIDIS Prime
ICS Advisory
##
Siemens SIDIS Prime
Release DateFebruary 15, 2024
Alert CodeICSA-24-046-02
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIDIS Prime
- Vulnerabilities: Use of Insufficiently Random Values, NULL Pointer Dereference, Infinite Loop
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an unauthenticated attacker with
Palo Alto
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
vendor_paloalto·2024-02-14·CVSS 9.8
CVE-2017-18342 [CRITICAL] PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the
CVEs: CVE-2017-18342, CVE-2017-8923, CVE-2017-9120, CVE-2019-1551, CVE-2019-16865, CVE-2019-16905, CVE-2019-19523, CVE-2019-19528, CVE-2019-19911, CVE-2020-0404, CVE-2020-0431, CVE-2020-0466, CVE-2020-10379, CVE-2020-11538, CVE-2020-11608, CVE-2020-12114, CVE-2020-12321, CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-13757, CVE-2020-14314, CVE-2020-14351, CVE-2020-15778, CVE-2020-1967, CVE-2020-24394, CVE-2020-24504, CVE-2020-25211, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25717, CVE-2020-26541, CVE-2020-2715
Oracle
Oracle Oracle PeopleSoft Risk Matrix: DPK (OpenSSL) — CVE-2020-1967
vendor_oracle·2021-10-15·CVSS 7.5
CVE-2020-1967 [HIGH] Oracle Oracle PeopleSoft Risk Matrix: DPK (OpenSSL) — CVE-2020-1967
Oracle Oracle PeopleSoft Risk Matrix: DPK (OpenSSL) vulnerability
CVE: CVE-2020-1967
CVSS: 7.5
Protocol: TLS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2021 (OCT 2021)
Oracle
Oracle Oracle E-Business Suite Risk Matrix: Technology Stack (OpenSSL) — CVE-2020-1967
vendor_oracle·2021-04-15·CVSS 7.5
CVE-2020-1967 [HIGH] Oracle Oracle E-Business Suite Risk Matrix: Technology Stack (OpenSSL) — CVE-2020-1967
Oracle Oracle E-Business Suite Risk Matrix: Technology Stack (OpenSSL) vulnerability
CVE: CVE-2020-1967
CVSS: 7.5
Protocol: HTTPS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2021 (APR 2021)
Oracle
Oracle Oracle JD Edwards Risk Matrix: Enterprise Infrastructure SEC (OpenSSL) — CVE-2020-1967
vendor_oracle·2021-01-15·CVSS 7.5
CVE-2020-1967 [HIGH] Oracle Oracle JD Edwards Risk Matrix: Enterprise Infrastructure SEC (OpenSSL) — CVE-2020-1967
Oracle Oracle JD Edwards Risk Matrix: Enterprise Infrastructure SEC (OpenSSL) vulnerability
CVE: CVE-2020-1967
CVSS: 7.5
Protocol: JDENET
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2021 (JAN 2021)
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Privilege Management (OpenSSL) — CVE-2020-1967
vendor_oracle·2020-10-15·CVSS 7.5
CVE-2020-1967 [HIGH] Oracle Oracle Enterprise Manager Risk Matrix: Privilege Management (OpenSSL) — CVE-2020-1967
Oracle Oracle Enterprise Manager Risk Matrix: Privilege Management (OpenSSL) vulnerability
CVE: CVE-2020-1967
CVSS: 7.5
Protocol: HTTPS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuoct2020 (OCT 2020)
Oracle
Oracle Oracle MySQL Risk Matrix: Connector/C++ (OpenSSL) — CVE-2020-1967
vendor_oracle·2020-07-15·CVSS 7.5
CVE-2020-1967 [HIGH] Oracle Oracle MySQL Risk Matrix: Connector/C++ (OpenSSL) — CVE-2020-1967
Oracle Oracle MySQL Risk Matrix: Connector/C++ (OpenSSL) vulnerability
CVE: CVE-2020-1967
CVSS: 7.5
Protocol: TLS
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2020 (JUL 2020)
Red Hat
openssl: Segmentation fault in SSL_check_chain causes denial of service
vendor_redhat·2020-04-21·CVSS 7.5
CVE-2020-1967 [HIGH] CWE-476 openssl: Segmentation fault in SSL_check_chain causes denial of service
openssl: Segmentation fault in SSL_check_chain causes denial of service
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
A NULL pointer dereference flaw was found in the way OpenSSL handled certain TLS handshake messages. This flaw allows an unauthenticated atta
BSD
FreeBSD-SA-20:11.openssl: OpenSSL remote denial of service vulnerability
bsd_advisories·2020-04-21·CVSS 7.5
CVE-2020-1967 [HIGH] FreeBSD-SA-20:11.openssl: OpenSSL remote denial of service vulnerability
FreeBSD-SA-20:11.openssl Security Advisory
The FreeBSD Project
Topic: OpenSSL remote denial of service vulnerability
Category: contrib
Module: openssl
Announced: 2020-04-21
Credits: Bernd Edlinger
Affects: FreeBSD 12.1
Corrected: 2020-04-21 15:47:58 UTC (stable/12, 12.1-STABLE)
2020-04-21 15:53:08 UTC (releng/12.1, 12.1-RELEASE-p4)
CVE Name: CVE-2020-1967
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit .
I. Background
FreeBSD includes software from the OpenSSL Project. The OpenSSL Project is a
collaborative effort to develop a robust, commercial-grade, full-featured
Open Source toolkit for the Transport Layer Security (TLS) and Secure Sockets
Layer (SSL) protocols. It
Debian
CVE-2020-1967: openssl - Server or client applications that call the SSL_check_chain() function during or...
vendor_debian·2020·CVSS 7.5
CVE-2020-1967 [HIGH] CVE-2020-1967: openssl - Server or client applications that call the SSL_check_chain() function during or...
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).
Scope: local
bookworm: resolved (fixed in 1.1.1g-1)
bullseye: resolved (fixed in 1.1.1g-1)
forky: resolved (fixed in 1.1.1g-1)
sid: resolved (fixed in 1.1.1g-1)
trixie: resolved (fixed in 1.1.1g-1)
No detection rules found.
No public exploits indexed.
HackerOne
Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
hackerone·2020-06-11·CVSS 4.3
[MEDIUM] Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
Tomcat examples available for public, Disclosure Apache Tomcat version, Critical/High/Medium CVE
**Summary:**
There are multiple issues found on ███:
1. ███████/examples/ - Apache Tomcat examples are available for public. Multiple issues - session and cookies manipulation, internals IP disclosure.
2. Error page contains information about Apache Tomcat version
3. Reported Tomcat version is vulnerable. Multiple CVEs - critical, high and medium
**Description:**
1. Examples are available by link: ███████/examples/
2. Information disclosure about Apache Tomcat version
3. Vulnerable version Apache Tomcat/8.5.33
https://nvd.nist.gov/vuln/detail/CVE-2020-1938
Base Score: 9.8 CRITICALVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://nvd.nist.gov/vuln/detail/CVE-2019-0232
Base Score
Bugzilla
CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service [fedora-all]
bugzilla·2020-04-21·CVSS 7.5
CVE-2020-1967 [HIGH] CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service [fedora-all]
CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multip
Bugzilla
CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service
bugzilla·2020-04-14·CVSS 7.5
CVE-2020-1967 [HIGH] CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service
CVE-2020-1967 openssl: Segmentation fault in SSL_check_chain causes denial of service
As per upstream advisory:
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack.
Discussion:
Acknowledgments:
Name: the OpenSSL project
Upstream: Bernd Edlinger
---
It seems like this flaw was caused by the commit https://github.com/openssl/openssl/commit/5235ef44b93306a14d0b6c695b13c64b16e1fdec which is a part of openssl-1.1.1d, older versions of openssl
Checkpoint
11th May – Threat Intelligence Bulletin
blogs_checkpoint·2020-05-11
CVE-2020-8899 11th May – Threat Intelligence Bulletin
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 11th May – Threat Intelligence Bulletin
For the latest discoveries in cyber research for the week of 11th May 2020, please download our Threat Intelligence Bulletin .
Top Attacks and Breaches
Check Point Research have discovered an ongoing cyber espionage operation against government entities in the Asia Pacific (APAC) region. The operation is attributed to the Naikon APT group, using a backdoor dubbed Aria-body to take control of the victims’ networks. One of the attack vectors was infecting a foreign embassy
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.htmlhttp://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.htmlhttp://seclists.org/fulldisclosure/2020/May/5http://www.openwall.com/lists/oss-security/2020/04/22/2https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1https://github.com/irsl/CVE-2020-1967https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3Ehttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.aschttps://security.gentoo.org/glsa/202004-10https://security.netapp.com/advisory/ntap-20200424-0003/https://security.netapp.com/advisory/ntap-20200717-0004/https://www.debian.org/security/2020/dsa-4661https://www.openssl.org/news/secadv/20200421.txthttps://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://www.synology.com/security/advisory/Synology_SA_20_05https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSLhttps://www.tenable.com/security/tns-2020-03https://www.tenable.com/security/tns-2020-04https://www.tenable.com/security/tns-2020-11https://www.tenable.com/security/tns-2021-10http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.htmlhttp://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.htmlhttp://seclists.org/fulldisclosure/2020/May/5http://www.openwall.com/lists/oss-security/2020/04/22/2https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=eb563247aef3e83dda7679c43f9649270462e5b1https://github.com/irsl/CVE-2020-1967https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44440https://lists.apache.org/thread.html/r66ea9c436da150683432db5fbc8beb8ae01886c6459ac30c2cea7345%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r94d6ac3f010a38fccf4f432b12180a13fa1cf303559bd805648c9064%40%3Cdev.tomcat.apache.org%3Ehttps://lists.apache.org/thread.html/r9a41e304992ce6aec6585a87842b4f2e692604f5c892c37e3b0587ee%40%3Cdev.tomcat.apache.org%3Ehttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDHOAATPWJCXRNFMJ2SASDBBNU5RJONY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXDDAOWSAIEFQNBHWYE6PPYFV4QXGMCD/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XVEP3LAK4JSPRXFO4QF4GG2IVXADV3SO/https://security.FreeBSD.org/advisories/FreeBSD-SA-20:11.openssl.aschttps://security.gentoo.org/glsa/202004-10https://security.netapp.com/advisory/ntap-20200424-0003/https://security.netapp.com/advisory/ntap-20200717-0004/https://www.debian.org/security/2020/dsa-4661https://www.openssl.org/news/secadv/20200421.txthttps://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://www.synology.com/security/advisory/Synology_SA_20_05https://www.synology.com/security/advisory/Synology_SA_20_05_OpenSSLhttps://www.tenable.com/security/tns-2020-03https://www.tenable.com/security/tns-2020-04https://www.tenable.com/security/tns-2020-11https://www.tenable.com/security/tns-2021-10
2020-04-21
Published