CVE-2020-1971

Severity
5.9MEDIUM
EPSS
0.3%
top 43.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 8
Latest updateMay 24

Description

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function f

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages31 packages

NVDopenssl/openssl1.0.21.0.2x+1
Debianopenssl< 1.1.1i-1+3
Ubuntuopenssl< 1.0.1f-1ubuntu2.27+esm2
CVEListV5openssl/opensslFixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w), Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h)+1

Also affects: Debian Linux 10.0, 9.0, Fedora 32, 33

Patches

🔴Vulnerability Details

5
GHSA
GHSA-whf2-mq76-2fhv: The X2022-05-24
OSV
CVE-2020-1971: In GENERAL_NAME_cmp of v3_genn2021-06-01
OSV
openssl vulnerabilities2021-02-23
OSV
CVE-2020-1971: The X2020-12-08
CVEList
EDIPARTYNAME NULL pointer dereference2020-12-08

📋Vendor Advisories

11
Oracle
Oracle Oracle Communications Risk Matrix: OC-CNE (OpenSSL) — CVE-2020-19712022-04-15
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: SSL Module (OpenSSL) — CVE-2020-19712021-10-15
Microsoft
OpenSSL: CVE-2020-1971 EDIPARTYNAME NULL pointer de-reference2021-10-12
Oracle
Oracle Oracle Enterprise Manager Risk Matrix: Discovery Framework (OpenSSL) — CVE-2020-19712021-07-15
Oracle
Oracle Oracle Communications Risk Matrix: Routing (OpenSSL) — CVE-2020-19712021-04-15
CVE-2020-1971 (MEDIUM CVSS 5.9) | The X.509 GeneralName type is a gen | cvebase.io