CVE-2021-23840

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

VendorProductVersions
OpenSSLOpenSSLFixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i); Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)

References

Timeline

Published
Feb 16, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-238415.9The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number dCVE-2021-238427.1Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieCVE-2021-238437.8The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putCVE-2021-238458.8This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was CVE-2021-238465.9When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker CVE-2021-238479.1A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive informationCVE-2021-238486.1An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker withCVE-2021-238498.8A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of aCVE-2021-23855.0Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 CVE-2021-238507.2A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which couCVE-2021-238517.2A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which coulCVE-2021-238524.9An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to bec
CVE-2021-23840: High severity, CVSS 7.5 | Vulnix