USN-5051-4
openssl regression
USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM. This update fix the regression.
Original advisory details:
Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2021-3712)
What each source reports
OSVNo score
openssl regression
USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM. This update fix the regression.
Original advisory details:
Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2021-3712)
- Record
USN-5051-4- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslUbuntu:Pro:14.04:LTS | before 1.0.1f-1ubuntu2.27+esm4, plus listed versions 1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4 Show 27 moreShow less1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.51.0.1f-1ubuntu2.71.0.1f-1ubuntu2.81.0.1f-1ubuntu2.111.0.1f-1ubuntu2.121.0.1f-1ubuntu2.151.0.1f-1ubuntu2.161.0.1f-1ubuntu2.171.0.1f-1ubuntu2.181.0.1f-1ubuntu2.191.0.1f-1ubuntu2.201.0.1f-1ubuntu2.211.0.1f-1ubuntu2.221.0.1f-1ubuntu2.231.0.1f-1ubuntu2.241.0.1f-1ubuntu2.251.0.1f-1ubuntu2.261.0.1f-1ubuntu2.271.0.1f-1ubuntu2.27+esm11.0.1f-1ubuntu2.27+esm21.0.1f-1ubuntu2.27+esm3 | 1.0.1f-1ubuntu2.27+esm4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-5051-4 is a vulnerability with no CVSS score yet in openssl, published September 1, 2021. No source lists public exploit code. Fixed in openssl 1.0.1f-1ubuntu2.27+esm4.