CVE-2021-23841

Source
https://cve.org/CVERecord?id=CVE-2021-23841
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-23841
Aliases
Downstream
ALPINE (1)
ALSA (1)
AZL (2)
BELL (1)
CGA (2)
CLEANSTART (3)
CLSA (2)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (1)
openSUSE (4)
RHSA (5)
RLSA (2)
SUSE (11)
UBUNTU (1)
Related
Published
2021-02-16T17:15:13Z
Modified
2026-11-11T13:05:38Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "14.6"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "apple:ipados"
        },
        {
            "cpes": [
                "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "14.6"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "apple:iphone_os"
        },
        {
            "cpes": [
                "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "11.1"
                        },
                        {
                            "fixed": "11.4"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "apple:macos"
        },
        {
            "cpes": [
                "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "14.1.1"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "apple:safari"
        },
        {
            "cpes": [
                "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.0.2"
                        },
                        {
                            "fixed": "1.0.2y"
                        },
                        {
                            "introduced": "1.1.1"
                        },
                        {
                            "fixed": "1.1.1j"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "openssl:openssl"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "8.0.23"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "oracle:mysql_enterprise_monitor"
        },
        {
            "cpes": [
                "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "1.0"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "siemens:sinec_ins"
        },
        {
            "cpes": [
                "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "5.13.0"
                        },
                        {
                            "last_affected": "5.17.0"
                        }
                    ],
                    "source": "CPE_RANGE"
                }
            ],
            "vendor_product": "tenable:tenable.sc"
        },
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "10.0"
                        },
                        {
                            "last_affected": "10.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "debian:debian_linux"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
                "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
                "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
                "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "5.5.0.0.0"
                        },
                        {
                            "last_affected": "5.5.0.0.0"
                        },
                        {
                            "introduced": "5.9.0.0.0"
                        },
                        {
                            "last_affected": "5.9.0.0.0"
                        },
                        {
                            "introduced": "12.2.1.3.0"
                        },
                        {
                            "last_affected": "12.2.1.3.0"
                        },
                        {
                            "introduced": "12.2.1.4.0"
                        },
                        {
                            "last_affected": "12.2.1.4.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:business_intelligence"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.15.0"
                        },
                        {
                            "last_affected": "1.15.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:communications_cloud_native_core_policy"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "13.4.0.0"
                        },
                        {
                            "last_affected": "13.4.0.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:enterprise_manager_for_storage_management"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "12.4.0.0"
                        },
                        {
                            "last_affected": "12.4.0.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:enterprise_manager_ops_center"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "21.2"
                        },
                        {
                            "last_affected": "21.2"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:essbase"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "a9.4"
                        },
                        {
                            "last_affected": "a9.4"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:jd_edwards_world_security"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.57"
                        },
                        {
                            "last_affected": "8.57"
                        },
                        {
                            "introduced": "8.58"
                        },
                        {
                            "last_affected": "8.58"
                        },
                        {
                            "introduced": "8.59"
                        },
                        {
                            "last_affected": "8.59"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:peoplesoft_enterprise_peopletools"
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.8"
                        },
                        {
                            "last_affected": "8.8"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "oracle:zfs_storage_appliance_kit"
        },
        {
            "cpes": [
                "cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*",
                "cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "1.0-NA"
                        },
                        {
                            "last_affected": "1.0-NA"
                        },
                        {
                            "introduced": "1.0-sp1"
                        },
                        {
                            "last_affected": "1.0-sp1"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "siemens:sinec_ins"
        },
        {
            "cpes": [
                "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "5.11.0"
                        },
                        {
                            "last_affected": "5.11.0"
                        },
                        {
                            "introduced": "5.11.1"
                        },
                        {
                            "last_affected": "5.11.1"
                        },
                        {
                            "introduced": "5.12.0"
                        },
                        {
                            "last_affected": "5.12.0"
                        },
                        {
                            "introduced": "5.12.1"
                        },
                        {
                            "last_affected": "5.12.1"
                        },
                        {
                            "introduced": "5.13.0"
                        },
                        {
                            "last_affected": "5.13.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "tenable:nessus_network_monitor"
        }
    ]
}
References

Affected packages

Git
github.com/alsyundawy/openssl-1.0.2

Affected ranges

Type
GIT
Repo
https://github.com/alsyundawy/openssl-1.0.2
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2y"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"
github.com/graalvm/graalvm-ce-builds

Affected ranges

Type
GIT
Repo
https://github.com/graalvm/graalvm-ce-builds
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.3.5"
                },
                {
                    "last_affected": "19.3.5"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "20.3.1.2"
                },
                {
                    "last_affected": "20.3.1.2"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "21.0.0.2"
                },
                {
                    "last_affected": "21.0.0.2"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

19.*
19.3.5
20.*
20.3.1.2
21.*
21.0.0.2
vm-19.*
vm-19.3.5
vm-20.*
vm-20.3.1
vm-21.*
vm-21.0.0
vm-21.0.0.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"
github.com/kzalewski/openssl-1.1.1

Affected ranges

Type
GIT
Repo
https://github.com/kzalewski/openssl-1.1.1
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1j"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "145081246022159018632346591780852072638",
            "length": 3301
        },
        "id": "CVE-2021-23841-0115da44",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "ASN1_mbstring_ncopy"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151496904140441974460168482169374190024",
                "252388763391472546762550272601898462670",
                "322392321298523662111637318544365606017",
                "92792830564595161366593755445407076135",
                "125370360892352031658984319622272957499",
                "135472893131710710891792272165369874557",
                "144388576385066123595834036136006620631",
                "251569583518298411383983956510462999062",
                "190752638376984200658169048788492801771",
                "100442701798321830557371459503827921141",
                "157868922838337151802955969179465392317",
                "247133924118207300622477622521703740882"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-10c2ef8d",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/pkcs7/pk7_smime.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "70418561901620867514045039520920039213",
            "length": 148
        },
        "id": "CVE-2021-23841-315e1fbb",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c",
            "function": "out_utf8"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "131154213046974496778457434048691074837",
                "11412147066710286517722597447846471117",
                "264770296592556677305107142032766937388",
                "276397443140848844849079658380453872857",
                "195870554892312134442829321964179019399"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-87e36a00",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "126341431044776940549287222658722596257",
                "130570927788432269899785168744788951172",
                "194169660864360803525450492876473860091",
                "110467782499934282756168500046914951485",
                "263946134258438649256241779625323641089",
                "232531144570205203842568959033909256821",
                "50105547378036962616739399907795763233",
                "35026789599821935911816818772042439275",
                "114710208109255960726965919362105298762",
                "125554540231637930487019176647117002503",
                "332182547294553747961268671162250805775",
                "276033856309860817184326883455361222142",
                "318268129131630080093563577138856184340",
                "128526451235089518533697095563624199685",
                "75522999902161732913968142567093758009",
                "233242365504435285051066046524808432015",
                "197089990496411212407345093272572794903",
                "203627204430850126635677767987115907052",
                "110527555710504927393608627867030602220",
                "129739062881190220811156277727848860285",
                "64544717289057079449815286406570439951",
                "201167284819377777248970251144566099169",
                "222516930768176972010755807924686646230",
                "90961471150301180096894104068604511683",
                "128676851434441285018275177161089865561",
                "129724505883296824298208229090221093179",
                "225269234833384762270352983556638638592",
                "90371650052899301631217696225591147992",
                "246784737627998664119002956221509877842",
                "315371643750711437594895449353374659288",
                "286011929765548229255520019142347591441",
                "220624038106194157196845376518684753434",
                "174882410006964856548150664239804105254",
                "116231510630487651899483668166785513275"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-89e18e76",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/tasn_dec.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "243971072618222724126117138392541085907",
                "20203436555900253968670420024125559450",
                "261033251671054815966464244630025010874",
                "142558467251092045021326807845044327645",
                "117558078243606577959089637136237792030",
                "124332917225391423252605388545338682722",
                "236022608503733170562534553288003810395",
                "339832511801857794746629870610675811880",
                "219260262152978755644652810379289549161",
                "238161164963855964634408949729400551790",
                "305007661457817428636275014467276783572",
                "224942011457082636465204480559032896603",
                "161399292792765951653776025419102349086",
                "249748745323502641665219507560747603718",
                "133814635171188589537358224623499256384",
                "166636678108051380708454788668826388282",
                "148812255457104429740188330155555022957",
                "67995203963239490129688609208357985916",
                "46589837028236721023105012731504719567",
                "61425611895307496760454057009746874404"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-8be4f956",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/a_mbstr.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "60884720753669845608764646390078165978",
            "length": 2404
        },
        "id": "CVE-2021-23841-8dac97cc",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c",
            "function": "cms_RecipientInfo_pwri_crypt"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "319646123228225632035521226865494527950",
                "52841444872899117514496250284924185664",
                "33853134948390324832871761212087746225",
                "81188860042095766577152905858367341175",
                "302749459819436303573414214711383738500",
                "106372169618065324582769687411773396323",
                "255586470514418239073904203556570502151",
                "316909758438434070933019317604952931093",
                "227036639418218030553513135503985645880",
                "19797040175335443903820697047342526981",
                "3213252085324805485799329367541299827",
                "167277605188112932709311947349617776953",
                "33676618202441094170922943458357128290"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-c30f17c3",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "219999985288845958916653358585559913606",
            "length": 2843
        },
        "id": "CVE-2021-23841-db231d4a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/asn1/tasn_dec.c",
            "function": "asn1_ex_c2i"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "130089047505679726786813950750828918851",
            "length": 1031
        },
        "id": "CVE-2021-23841-df118fd8",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec",
        "target": {
            "file": "crypto/cms/cms_pwri.c",
            "function": "kek_unwrap_key"
        }
    }
]
vanir_signatures_modified
"2026-11-11T13:05:38Z"
github.com/mysql/mysql-server

Affected ranges

Type
GIT
Repo
https://github.com/mysql/mysql-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Introduced
Fixed
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "5.7.33"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.0.15"
                },
                {
                    "fixed": "8.0.23"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.7.31
mysql-5.7.32

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "286756561296075042237231219649184368171",
                "302896255058266923472696425836035569717",
                "300297427993859605007554044173966498739",
                "175565100923089660637647648328373853699",
                "71802579880224164103266412744806334599",
                "315666916814277685292192961936838231932",
                "198092292660585766502869236426726266894",
                "162640942130416387239939759911226756525"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-a59356ae",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/mysql/mysql-server/commit/e5d189ecb9465f4be6235109dd3dbcaab01ddc53",
        "target": {
            "file": "include/welcome_copyright_notice.h"
        }
    }
]
vanir_signatures_modified
"2026-11-11T13:05:38Z"
github.com/openssl/openssl

Affected ranges

Type
GIT
Repo
https://github.com/openssl/openssl
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.0.2"
                },
                {
                    "fixed": "1.0.2y"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.1.1"
                },
                {
                    "fixed": "1.1.1j"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"
vanir_signatures
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "28170854778703993674264004058177114599",
                "73132526844288570625317440636111911761",
                "177405411499435185068645597737938634778",
                "224809958623850711330610094965797758930",
                "295554444428855106393106961197201359586"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-c377fa22",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86",
        "target": {
            "file": "include/openssl/opensslv.h"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251633914150035957322733061977107206211",
                "338514574181828579838011565939158652696",
                "76638288692106140328510055542557597351",
                "142922657400765574308962710386922248045",
                "71649992455794854055653842592139575350",
                "65527166711110472566013424527579064967",
                "253196866009476977787139000804413898733",
                "172177136897997206866313011107384691461"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2021-23841-e051451f",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8",
        "target": {
            "file": "crypto/opensslv.h"
        }
    }
]
vanir_signatures_modified
"2026-11-11T13:05:38Z"