OpenSSL Update
2018Warning Date
Severity Level
Warning Number
Target Sector
25 August, 2021
● High
2021-3418
All
Description:
OpenSSL has released a security update to address multiple vulnerabilities in the following product:
- OpenSSL
- 1.1.1-1.1.1k
- 1.0.2-1.0.2y
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Denial of service attack (DoS)
- Sensitive information disclosure
- Buffer overflow
Best practice and Recommendations:
The CERT team encourages users to review OpenSSL security advisory and apply the necessary update: