{"id":"USN-5051-4","aliases":[],"status":"published","title":"openssl regression","description":"USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM.\nThis update fix the regression.\n\nOriginal advisory details:\n\n Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1\n strings. A remote attacker could use this issue to cause OpenSSL to crash,\n resulting in a denial of service, or possibly obtain sensitive information.\n (CVE-2021-3712)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-09-01T18:49:31Z","modified":"2026-06-29T13:49:29Z","fixes":[{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","fixed_in":["1.0.1f-1ubuntu2.27+esm4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1f-1ubuntu2.27+esm4"}]}],"versions":["1.0.1e-3ubuntu1","1.0.1e-4ubuntu1","1.0.1e-4ubuntu2","1.0.1e-4ubuntu3","1.0.1e-4ubuntu4","1.0.1f-1ubuntu1","1.0.1f-1ubuntu2","1.0.1f-1ubuntu2.1","1.0.1f-1ubuntu2.2","1.0.1f-1ubuntu2.3","1.0.1f-1ubuntu2.4","1.0.1f-1ubuntu2.5","1.0.1f-1ubuntu2.7","1.0.1f-1ubuntu2.8","1.0.1f-1ubuntu2.11","1.0.1f-1ubuntu2.12","1.0.1f-1ubuntu2.15","1.0.1f-1ubuntu2.16","1.0.1f-1ubuntu2.17","1.0.1f-1ubuntu2.18","1.0.1f-1ubuntu2.19","1.0.1f-1ubuntu2.20","1.0.1f-1ubuntu2.21","1.0.1f-1ubuntu2.22","1.0.1f-1ubuntu2.23","1.0.1f-1ubuntu2.24","1.0.1f-1ubuntu2.25","1.0.1f-1ubuntu2.26","1.0.1f-1ubuntu2.27","1.0.1f-1ubuntu2.27+esm1","1.0.1f-1ubuntu2.27+esm2","1.0.1f-1ubuntu2.27+esm3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-5051-4","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1942357","tags":["report"]}],"sources":{"osv":[{"id":"USN-5051-4","title":"openssl regression","description":"USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM.\nThis update fix the regression.\n\nOriginal advisory details:\n\n Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1\n strings. A remote attacker could use this issue to cause OpenSSL to crash,\n resulting in a denial of service, or possibly obtain sensitive information.\n (CVE-2021-3712)\n","status":"published","published":"2021-09-01T18:49:31Z","modified":"2026-06-29T13:49:29.195854201Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}