OpenSSL Security Advisory [25 March 2021]

• OpenSSL

  150 24,254 9.9 C

  TLS/SSL and crypto library

  

here's the null pointer deference: https://github.com/openssl/openssl/commit/02b1636fe3db274497...

• httpd

  2 300 5.0 Dockerfile

  Docker Official Image packaging for Apache HTTP Server (by docker-library)

  

You can try configuring SSLOptions -OptRenegotiate and then point ssllabs at it to see if reneg is disabled.

If that doesn't work, recompile apache against an older version of openssl. Maybe the easiest way to do that is take the Dockerfile (https://github.com/docker-library/httpd/blob/master/2.4/Dock...), take out libssl-dev, compile a specific openssl version, then link against it.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• cve-2021-3449

  4 225 0.0 Go

  CVE-2021-3449 OpenSSL denial-of-service exploit 👨🏻‍💻

Does anyone have a PoC? Someone posted this on Github but the git log is squashed and doesn't show the changes they made. https://github.com/terorie/cve-2021-3449

Suggest a related project