{"id":"CVE-2021-23841","details":"The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x).","aliases":["GHSA-84rm-qf37-fgc2","RUSTSEC-2021-0058"],"modified":"2026-11-11T13:05:38.512982838Z","published":"2021-02-16T17:15:13.377Z","related":["ALSA-2021:4198","SUSE-FU-2022:0445-1","SUSE-SU-2021:0725-1","SUSE-SU-2021:0752-1","SUSE-SU-2021:0753-1","SUSE-SU-2021:0754-1","SUSE-SU-2021:0755-1","SUSE-SU-2021:0769-1","SUSE-SU-2021:0793-1","SUSE-SU-2021:0939-1","SUSE-SU-2021:14667-1","SUSE-SU-2021:14670-1","openSUSE-SU-2021:0427-1","openSUSE-SU-2021:0430-1","openSUSE-SU-2024:11126-1","openSUSE-SU-2024:11127-1"],"database_specific":{"unresolved_ranges":[{"vendor_product":"apple:ipados","cpes":["cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"14.6"}]}]},{"vendor_product":"apple:iphone_os","cpes":["cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"14.6"}]}]},{"extracted_events":[{"source":"CPE_RANGE","range":[{"introduced":"11.1"},{"fixed":"11.4"}]}],"vendor_product":"apple:macos","cpes":["cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"]},{"vendor_product":"apple:safari","cpes":["cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"14.1.1"}],"source":"CPE_RANGE"}]},{"vendor_product":"openssl:openssl","cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"introduced":"1.0.2"},{"fixed":"1.0.2y"},{"introduced":"1.1.1"},{"fixed":"1.1.1j"}]}]},{"vendor_product":"oracle:mysql_enterprise_monitor","cpes":["cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"fixed":"8.0.23"}],"source":"CPE_RANGE"}]},{"extracted_events":[{"source":"CPE_RANGE","range":[{"fixed":"1.0"}]}],"vendor_product":"siemens:sinec_ins","cpes":["cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"5.13.0"},{"last_affected":"5.17.0"}],"source":"CPE_RANGE"}],"vendor_product":"tenable:tenable.sc"},{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"10.0"},{"last_affected":"10.0"}]}],"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:business_intelligence","cpes":["cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*","cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*"],"extracted_events":[{"range":[{"introduced":"5.5.0.0.0"},{"last_affected":"5.5.0.0.0"},{"introduced":"5.9.0.0.0"},{"last_affected":"5.9.0.0.0"},{"introduced":"12.2.1.3.0"},{"last_affected":"12.2.1.3.0"},{"introduced":"12.2.1.4.0"},{"last_affected":"12.2.1.4.0"}],"source":"CPE_STRING"}]},{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"1.15.0"},{"last_affected":"1.15.0"}]}],"vendor_product":"oracle:communications_cloud_native_core_policy","cpes":["cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*"]},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"13.4.0.0"},{"last_affected":"13.4.0.0"}],"source":"CPE_STRING"}],"vendor_product":"oracle:enterprise_manager_for_storage_management"},{"vendor_product":"oracle:enterprise_manager_ops_center","cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"12.4.0.0"},{"last_affected":"12.4.0.0"}],"source":"CPE_STRING"}]},{"cpes":["cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"21.2"},{"last_affected":"21.2"}],"source":"CPE_STRING"}],"vendor_product":"oracle:essbase"},{"vendor_product":"oracle:jd_edwards_world_security","cpes":["cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"a9.4"},{"last_affected":"a9.4"}]}]},{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"8.57"},{"last_affected":"8.57"},{"introduced":"8.58"},{"last_affected":"8.58"},{"introduced":"8.59"},{"last_affected":"8.59"}]}],"vendor_product":"oracle:peoplesoft_enterprise_peopletools","cpes":["cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*","cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*"]},{"vendor_product":"oracle:zfs_storage_appliance_kit","cpes":["cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"8.8"},{"last_affected":"8.8"}]}]},{"extracted_events":[{"source":"CPE_STRING","range":[{"introduced":"1.0-NA"},{"last_affected":"1.0-NA"},{"introduced":"1.0-sp1"},{"last_affected":"1.0-sp1"}]}],"vendor_product":"siemens:sinec_ins","cpes":["cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*"]},{"vendor_product":"tenable:nessus_network_monitor","cpes":["cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*","cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*","cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*","cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*","cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"5.11.0"},{"last_affected":"5.11.0"},{"introduced":"5.11.1"},{"last_affected":"5.11.1"},{"introduced":"5.12.0"},{"last_affected":"5.12.0"},{"introduced":"5.12.1"},{"last_affected":"5.12.1"},{"introduced":"5.13.0"},{"last_affected":"5.13.0"}],"source":"CPE_STRING"}]}]},"references":[{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf"},{"type":"WEB","url":"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2021/May/67"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2021/May/68"},{"type":"ADVISORY","url":"http://seclists.org/fulldisclosure/2021/May/70"},{"type":"ADVISORY","url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202103-03"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210219-0009/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20210513-0002/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240621-0006/"},{"type":"ADVISORY","url":"https://support.apple.com/kb/HT212528"},{"type":"ADVISORY","url":"https://support.apple.com/kb/HT212529"},{"type":"ADVISORY","url":"https://support.apple.com/kb/HT212534"},{"type":"ADVISORY","url":"https://www.debian.org/security/2021/dsa-4855"},{"type":"ADVISORY","url":"https://www.openssl.org/news/secadv/20210216.txt"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2021-03"},{"type":"ADVISORY","url":"https://www.tenable.com/security/tns-2021-09"},{"type":"FIX","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf"},{"type":"FIX","url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuapr2022.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2021.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/alsyundawy/openssl-1.0.2","events":[{"introduced":"c46078156d49453ba69badc9addb1e2dcd1c71f5"},{"fixed":"c46078156d49453ba69badc9addb1e2dcd1c71f5"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2"},{"fixed":"1.0.2y"}],"source":"CPE_RANGE"}]}}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/graalvm/graalvm-ce-builds","events":[{"introduced":"251e15bf41dcc0c1b4e3debdb7d01f7082734ddd"},{"last_affected":"2ada493c63db015cc41bca1021f0e567f51893c6"}],"database_specific":{"extracted_events":[{"source":"CPE_STRING","cpe":"cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*","range":[{"introduced":"19.3.5"},{"last_affected":"19.3.5"}]},{"range":[{"introduced":"20.3.1.2"},{"last_affected":"20.3.1.2"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*"},{"cpe":"cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*","range":[{"introduced":"21.0.0.2"},{"last_affected":"21.0.0.2"}],"source":"CPE_STRING"}]}}],"versions":["19.3.5","20.3.1.2","21.0.0.2","vm-21.0.0.2","vm-21.0.0","vm-20.3.1","vm-19.3.5"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kzalewski/openssl-1.1.1","events":[{"introduced":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"fixed":"ddb327ab19b29c64c1752cef26c460ca0b7064ec"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.1.1"},{"fixed":"1.1.1j"}],"source":"CPE_RANGE"}]}}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json","vanir_signatures":[{"deprecated":false,"digest":{"length":3301,"function_hash":"145081246022159018632346591780852072638"},"id":"CVE-2021-23841-0115da44","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"function":"ASN1_mbstring_ncopy","file":"crypto/asn1/a_mbstr.c"}},{"digest":{"threshold":0.9,"line_hashes":["151496904140441974460168482169374190024","252388763391472546762550272601898462670","322392321298523662111637318544365606017","92792830564595161366593755445407076135","125370360892352031658984319622272957499","135472893131710710891792272165369874557","144388576385066123595834036136006620631","251569583518298411383983956510462999062","190752638376984200658169048788492801771","100442701798321830557371459503827921141","157868922838337151802955969179465392317","247133924118207300622477622521703740882"]},"id":"CVE-2021-23841-10c2ef8d","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/pkcs7/pk7_smime.c"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c","function":"out_utf8"},"deprecated":false,"digest":{"function_hash":"70418561901620867514045039520920039213","length":148},"id":"CVE-2021-23841-315e1fbb"},{"deprecated":false,"digest":{"line_hashes":["131154213046974496778457434048691074837","11412147066710286517722597447846471117","264770296592556677305107142032766937388","276397443140848844849079658380453872857","195870554892312134442829321964179019399"],"threshold":0.9},"id":"CVE-2021-23841-87e36a00","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"include/openssl/opensslv.h"}},{"digest":{"threshold":0.9,"line_hashes":["126341431044776940549287222658722596257","130570927788432269899785168744788951172","194169660864360803525450492876473860091","110467782499934282756168500046914951485","263946134258438649256241779625323641089","232531144570205203842568959033909256821","50105547378036962616739399907795763233","35026789599821935911816818772042439275","114710208109255960726965919362105298762","125554540231637930487019176647117002503","332182547294553747961268671162250805775","276033856309860817184326883455361222142","318268129131630080093563577138856184340","128526451235089518533697095563624199685","75522999902161732913968142567093758009","233242365504435285051066046524808432015","197089990496411212407345093272572794903","203627204430850126635677767987115907052","110527555710504927393608627867030602220","129739062881190220811156277727848860285","64544717289057079449815286406570439951","201167284819377777248970251144566099169","222516930768176972010755807924686646230","90961471150301180096894104068604511683","128676851434441285018275177161089865561","129724505883296824298208229090221093179","225269234833384762270352983556638638592","90371650052899301631217696225591147992","246784737627998664119002956221509877842","315371643750711437594895449353374659288","286011929765548229255520019142347591441","220624038106194157196845376518684753434","174882410006964856548150664239804105254","116231510630487651899483668166785513275"]},"id":"CVE-2021-23841-89e18e76","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["243971072618222724126117138392541085907","20203436555900253968670420024125559450","261033251671054815966464244630025010874","142558467251092045021326807845044327645","117558078243606577959089637136237792030","124332917225391423252605388545338682722","236022608503733170562534553288003810395","339832511801857794746629870610675811880","219260262152978755644652810379289549161","238161164963855964634408949729400551790","305007661457817428636275014467276783572","224942011457082636465204480559032896603","161399292792765951653776025419102349086","249748745323502641665219507560747603718","133814635171188589537358224623499256384","166636678108051380708454788668826388282","148812255457104429740188330155555022957","67995203963239490129688609208357985916","46589837028236721023105012731504719567","61425611895307496760454057009746874404"],"threshold":0.9},"id":"CVE-2021-23841-8be4f956","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/a_mbstr.c"}},{"deprecated":false,"digest":{"function_hash":"60884720753669845608764646390078165978","length":2404},"id":"CVE-2021-23841-8dac97cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/cms/cms_pwri.c","function":"cms_RecipientInfo_pwri_crypt"}},{"target":{"file":"crypto/cms/cms_pwri.c"},"deprecated":false,"digest":{"line_hashes":["319646123228225632035521226865494527950","52841444872899117514496250284924185664","33853134948390324832871761212087746225","81188860042095766577152905858367341175","302749459819436303573414214711383738500","106372169618065324582769687411773396323","255586470514418239073904203556570502151","316909758438434070933019317604952931093","227036639418218030553513135503985645880","19797040175335443903820697047342526981","3213252085324805485799329367541299827","167277605188112932709311947349617776953","33676618202441094170922943458357128290"],"threshold":0.9},"id":"CVE-2021-23841-c30f17c3","signature_type":"Line","signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec"},{"signature_version":"v1","source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"file":"crypto/asn1/tasn_dec.c","function":"asn1_ex_c2i"},"deprecated":false,"digest":{"function_hash":"219999985288845958916653358585559913606","length":2843},"id":"CVE-2021-23841-db231d4a","signature_type":"Function"},{"source":"https://github.com/kzalewski/openssl-1.1.1/commit/ddb327ab19b29c64c1752cef26c460ca0b7064ec","target":{"function":"kek_unwrap_key","file":"crypto/cms/cms_pwri.c"},"deprecated":false,"digest":{"length":1031,"function_hash":"130089047505679726786813950750828918851"},"id":"CVE-2021-23841-df118fd8","signature_type":"Function","signature_version":"v1"}],"vanir_signatures_modified":"2026-11-11T13:05:38Z"}},{"ranges":[{"type":"GIT","repo":"https://github.com/mysql/mysql-server","events":[{"introduced":"0"},{"fixed":"e5d189ecb9465f4be6235109dd3dbcaab01ddc53"},{"introduced":"ca94b993454c86be248fbe180db94647488114e9"},{"fixed":"7ed30a748964c009d4909cb8b4b22036ebdef239"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","range":[{"introduced":"0"},{"fixed":"5.7.33"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*","range":[{"introduced":"8.0.15"},{"fixed":"8.0.23"}]}]}}],"versions":["mysql-5.7.32","mysql-5.7.31","mysql-5.1.4","mysql-4.0.4","mysql-4.0.2","mysql-3.23.36","mysql-3.23.33","mysql-3.23.32","mysql-3.23.31","mysql-3.23.30-gamma","mysql-3.23.28-gamma","mysql-3.23.22-beta"],"database_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mysql/mysql-server/commit/e5d189ecb9465f4be6235109dd3dbcaab01ddc53","target":{"file":"include/welcome_copyright_notice.h"},"deprecated":false,"digest":{"line_hashes":["286756561296075042237231219649184368171","302896255058266923472696425836035569717","300297427993859605007554044173966498739","175565100923089660637647648328373853699","71802579880224164103266412744806334599","315666916814277685292192961936838231932","198092292660585766502869236426726266894","162640942130416387239939759911226756525"],"threshold":0.9},"id":"CVE-2021-23841-a59356ae"}],"vanir_signatures_modified":"2026-11-11T13:05:38Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openssl/openssl","events":[{"introduced":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"fixed":"e818b74be2170fbe957a07b0da4401c2b694b3b8"},{"introduced":"e04bd3433fd84e1861bf258ea37928d9845e6a86"},{"fixed":"e04bd3433fd84e1861bf258ea37928d9845e6a86"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","range":[{"introduced":"1.0.2"},{"fixed":"1.0.2y"}],"source":"CPE_RANGE"},{"range":[{"introduced":"1.1.1"},{"fixed":"1.1.1j"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"}]}}],"database_specific":{"vanir_signatures":[{"id":"CVE-2021-23841-c377fa22","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e04bd3433fd84e1861bf258ea37928d9845e6a86","target":{"file":"include/openssl/opensslv.h"},"deprecated":false,"digest":{"line_hashes":["28170854778703993674264004058177114599","73132526844288570625317440636111911761","177405411499435185068645597737938634778","224809958623850711330610094965797758930","295554444428855106393106961197201359586"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["251633914150035957322733061977107206211","338514574181828579838011565939158652696","76638288692106140328510055542557597351","142922657400765574308962710386922248045","71649992455794854055653842592139575350","65527166711110472566013424527579064967","253196866009476977787139000804413898733","172177136897997206866313011107384691461"],"threshold":0.9},"id":"CVE-2021-23841-e051451f","signature_type":"Line","signature_version":"v1","source":"https://github.com/openssl/openssl/commit/e818b74be2170fbe957a07b0da4401c2b694b3b8","target":{"file":"crypto/opensslv.h"}}],"vanir_signatures_modified":"2026-11-11T13:05:38Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23841.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}