A corrective release of the OpenSSL cryptographic library 1.1.1l is available, addressing two vulnerabilities:
- CVE-2021-3711 — buffer overflow in the code implementing the SM2 cryptographic algorithm (prevalent in China), which allows an error in buffer size calculation to overwrite up to 62 bytes in an out-of-bounds area. An attacker could potentially achieve code execution or cause an application crash by sending specially crafted data for decoding in applications using the EVP_PKEY_decrypt() function for SM2 data decryption.
- CVE-2021-3712 — buffer overflow in ASN.1 string handling code, which could lead to application crashes or expose process memory contents (for example, to discover stored in-memory keys) if an attacker can somehow create a string in the internal ASN1_STRING structure that does not end with a null character and process it in OpenSSL functions that output certificates, such as X509_aux_print(), X509_get1_email(), X509_REQ_get1_email(), and X509_get1_ocsp().
New versions of the LibreSSL library 3.3.4 and 3.2.6 have been released, which do not explicitly mention vulnerabilities, but according to the changelog, the CVE-2021-3712 vulnerability has been addressed.
Source: opennet.ru
