CVE-2021-3712
HighAdvisory
Published 24 Aug 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.504
- 99th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,165
- of 17,781 indexed, latest versions
- Container images
- 1,127
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 1,165 of 17,781 indexed charts deploy, on 1,127 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+59 more | 1.0.1f-1ubuntu2.27+esm4, 1.0.2g-1ubuntu4.20+esm1, 1.1.0l-1~deb9u4, 1.1.1-1ubuntu2.1~18.04.13+2 more | 614 |
| opensslapk | 1.1.1d-r3, 1.1.1g-r0, 1.1.1i-r0, 1.1.1j-r0+1 more | 1.1.1l-r0 | 429 |
| openssl1.0deb | 1.0.2l-2, 1.0.2l-2+deb9u1, 1.0.2l-2+deb9u2, 1.0.2l-2+deb9u3+11 more | 1.0.2n-1ubuntu5.7, 1.0.2u-1~deb9u6 | 108 |
| opensslrpm | 1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+10 more | 1:1.0.2k-23.el7_9, 1:1.1.1k-5.el8_5 | 76 |
| openssl-1_1rpm | 1.1.0i-14.6.1, 1.1.1d-11.6.1 | 1.1.0i-14.18.1, 1.1.1d-11.30.1 | 8 |
- OSV records
- ALPINE-CVE-2021-3712RHSA-2021:5226RHSA-2022:0064UBUNTU-CVE-2021-3712DLA-2766-1DLA-2774-1SUSE-SU-2021:2831-1SUSE-SU-2021:2966-1
- Also known as
- SUSE-SU-2021:2968-1, USN-5051-1, USN-5051-2, USN-5051-3
Charts affected
1,165 by stars
Container images carrying it
1,127 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 6c5efe150958 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 | 2 |
| ghcr.io/ | 3f7cc45fd20b | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 | 2 |
| mcr.microsoft.com/ | 902628a8be89 | openssl | no fix listed | 2 |
| quay.io/ | 5f6f8ba0b671 | openssl | 1.1.1l-r0 | 2 |
| quay.io/ | d8c631a6dc43 | openssl | 1:1.1.1k-5.el8_5 | 2 |
| quay.io/ | 464a3af4dfe0 | openssl | 1:1.1.1k-5.el8_5 | 2 |
| quay.io/ | bb5e052770e5 | openssl | 1:1.1.1k-5.el8_5 | 2 |
| 5200710/ | 092d3088a5fb | openssl | no fix listed | 1 |
| a10networks/ | 8dc58d434d71 | openssl | 1.1.1-1ubuntu2.1~18.04.13 | 1 |
| aaionap/ | 89c1078a1b23 | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| absaoss/ | ad538a1285a0 | openssl | 1.1.1l-r0 | 1 |
| acockburn/ | 3a93281d7e94 | openssl | 1.1.1l-r0 | 1 |
| adferrand/ | 6fea97b02758 | openssl | 1.1.1l-r0 | 1 |
| adgoal/ | 75ed282ad613 | openssl | 1.1.1l-r0 | 1 |
| adrianberger/ | 76848c0d2780 | openssl | 1.1.1l-r0 | 1 |
| adwerx/ | 840d2b078682 | openssl | 1.1.1f-1ubuntu2.8 | 1 |
| aerospike/ | 5bec98d46c8a | openssl | 1.1.0l-1~deb9u4 | 1 |
| airsonicadvanced/ | f7cbafac2806 | openssl | 1.1.1f-1ubuntu2.8 | 1 |
| ajanvier/ | 91ac61b88c85 | openssl | 1.1.1l-r0 | 1 |
| allegroai/ | 772827a01bb5 | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.13.2 | 1 |
| almir/ | 1698346f6077 | openssl | 1.1.1l-r0 | 1 |
| alphayax/ | c284977f027a | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| alpine/ | a41efe02a041 | openssl | 1.1.1l-r0 | 1 |
| altinity/ | db7dde971407 | openssl | 1:1.0.2k-23.el7_9 | 1 |
| altinity/ | 85b4fdbae053 | openssl | 1:1.0.2k-23.el7_9 | 1 |
| amancevice/ | c8c04bfe3d66 | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| anapsix/ | 7cf7deb20399 | openssl | 1.1.1l-r0 | 1 |
| anchore/ | bde9eedf639d | openssl | 1:1.1.1k-5.el8_5 | 1 |
| anchore/ | ed9b3badd17c | openssl | 1:1.1.1k-5.el8_5 | 1 |
| anguda/ | c435285fc241 | openssl | no fix listed | 1 |
| apache/ | 228eb0edf44b | openssl | 1.1.1l-r0 | 1 |
| apache/ | 412f92cde0b3 | openssl | 1.1.1l-r0 | 1 |
| apache/ | 9f895c8ae371 | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| apache/ | afa47bf1692a | openssl | no fix listed | 1 |
| apachepulsar/ | 3b262ab7a7d9 | openssl | no fix listed | 1 |
| apachepulsar/ | d056c89b7131 | openssl | no fix listed | 1 |
| apachepulsar/ | d538416d5afe | openssl | no fix listed | 1 |
| apache/ | b4ec8c18d079 | openssl | no fix listed | 1 |
| apache/ | 80530f0308a5 | openssl | no fix listed | 1 |
| apicurio/ | 44eeddd3562c | openssl | 1.1.1l-r0 | 1 |
| apicurio/ | a97d67487532 | openssl | 1:1.1.1k-5.el8_5 | 1 |
| apsl/ | 51e2de5c2c70 | openssl | 1.1.0l-1~deb9u4 | 1 |
| aquasec/ | 7ea4aa3d2eb6 | openssl | 1.1.1l-r0 | 1 |
| aquasec/ | 0bf607ce9308 | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| argoproj/ | b0230853357d | openssl openssl1.0 | 1.1.0l-1~deb9u4 1.0.2u-1~deb9u6 | 1 |
| arilot/ | 27a4f7e0f9f1 | openssl | 1.0.2g-1ubuntu4.20+esm1 | 1 |
| assistiot/ | 6a107f224c34 | openssl | no fix listed | 1 |
| assistiot/ | d157fbe150e3 | openssl | no fix listed | 1 |
| assistiot/ | ea254b6d8a31 | openssl | no fix listed | 1 |
| assistiot/ | e5ae539ce2cb | openssl | no fix listed | 1 |