Intrusion PreventionOpenSSL.SM2.Decryption.sm2_plaintext_size.Buffer.Overflow
Description
This indicates an attack attempt to exploit a Buffer Overflow Vulnerability in OpenSSL Project OpenSSL.
The vulnerability is due to miscalculation of the outlen parameter used by EVP_PKEY_decrypt when decrypting SM2 encrypted data. A remote attacker could exploit the vulnerability by sending crafted packets to an application using OpenSSL API for SM2 decryption. Successful exploitation could result in denial of service conditions on the affected service.
Affected Products
OpenSSL Project OpenSSL prior to 1.1.1l
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.openssl.org/news/secadv/20210824.txt
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 50759 |
| Created | Sep 15, 2021 |
| Updated | Oct 01, 2021 |
| Risk |
|
| CVE ID | CVE-2021-3711 |
| Exploit Prediction Score | 8.64% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | Other |