Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

CVE-2021-3711 in OpenSSL can allow to change an application’s behavior

Security Affairsby @securityaffairs ()1 min read2 · 1 read
Read at securityaffairs.com
Analyze CVE-2021-3711 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2021-3711CVE-2021-3712
Tags
cve-2021-3711cve-2021-3712vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-3711
+1 related CVE
CVE-2021-3712
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt()
9.8
group max
88%

From the original article

1 min read at securityaffairs.com

The OpenSSL Project patched a high-severity vulnerability, tracked as CVE-2021-3711 , that can allow an attacker to change an application’s behavior or cause the app to crash. The OpenSSL Project released the OpenSSL 1. 1.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.