OpenSSL Latest version gets attention...

OpenSSL Update

First, install or check latest version of OpenSSL software package. Also check any vulnerability remarked on websites for the particular version.

 

When I am writing this article, OpenSSL Stable version released as 1.1.1L (code pronounced as LIMA).

Prior versions having some vulnerabilities as CVE-2021-3711 and CVE-2021-3712

 

The first bug is caused by a heap-based buffer overflow in the SM2 cryptographic algorithm, which generally leads to crashes but can also be abused by attackers for arbitrary code execution.

The second flaw is a read buffer overrun while processing ASN.1 strings that can be exploited to crash vulnerable apps in DoS attacks or gain access to private memory contents such as private keys or other sensitive info.

 

Above-mentioned vulnerabilities may allow remote attackers to conduct denial-of-service attack or execute arbitrary code.

 

I recommend update your server systems or network related IoT devices for vulnerable free.

 

Link: OpenSSL