CVE-2020-1971 json
EDIPARTYNAME NULL pointer dereference
published 2020-12-08 5 y ago modified 2026-10-16 23 d ago also BIT-node-2020-1971 , BIT-node-min-2020-1971 , EUVD-2020-12761 , GHSA-whf2-mq76-2fhv , JLSEC-2026-220
- cvss
- 5.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.0%
- EPSS 7.0% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).
Patch / fix
- bitnami node 10.23.1, 12.20.1, 14.15.4, 15.5.0
- bitnami node-min 10.12.1, 10.23.1, 12.12.1, 12.20.1, 14.14.1, 14.15.4, 15.5.0
- julia OpenSSL_jll 1.1.10+0
- julia Openresty_jll 1.19.9+0
- openssl openssl 1.0.2x, 1.1.1i
- oracle jd_edwards_enterpriseone_tools 9.2.5.3
- tenable log_correlation_engine 6.0.9
- tenable nessus_network_monitor 5.13.1
- siemens sinec_infrastructure_network_services 1.0.1.1
- nodejs node.js 10.23.1, 12.20.1, 14.15.4, 15.5.0
- openssl Debian 14, Debian 13, Debian 12 1.1.1i-1
debian advisories DEBIAN-CVE-2020-1971
- openssl Ubuntu 16.04 LTS 1.0.2g-1ubuntu4.18
- openssl Ubuntu 18.04 LTS 1.1.1-1ubuntu2.1~18.04.7
- openssl Ubuntu 20.04 LTS 1.1.1f-1ubuntu2.1
- openssl1.0 Ubuntu 18.04 LTS 1.0.2n-1ubuntu5.5
- openssl Ubuntu Pro 14.04 LTS 1.0.1f-1ubuntu2.27+esm2
ubuntu advisories UBUNTU-CVE-2020-1971
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- jws5-tomcat jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el7jws
- jws5-tomcat jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el8jws
- jws5-tomcat-lib jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el7jws
- jws5-tomcat-lib jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el8jws
- jws5-tomcat-native jboss enterprise web server 5.4 1.2.25-3.redhat_3.el7jws
- jws5-tomcat-native jboss enterprise web server 5.4 1.2.25-3.redhat_3.el8jws
- jws5-tomcat-javadoc jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el7jws
- jws5-tomcat-javadoc jboss enterprise web server 5.4 9.0.36-9.redhat_8.1.el8jws
red hat advisories RHSA-2021:0494RHSA-2021:0489RHSA-2021:0486RHSA-2020:5637RHSA-2020:5566RHSA-2020:5588
- nodejs10 SLE Module for Web and Scripting 12 10.23.1-1.33.1
- nodejs12 SLE Module for Web and Scripting 12 12.20.1-1.26.1
- nodejs12 SLE Module for Web and Scripting 15 SP2 12.20.1-4.10.1
- nodejs10 SLES for SAP 15, SLES 15-LTSS, SLE Module for Web and Scripting 15 SP2 +3 more 10.23.1-1.30.1
- openssl SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES 12 SP3-LTSS +8 more 1.0.2j-60.63.1
- openssl-1_0_0 SLES for SAP 15, SLES 15-LTSS, SLE Module for Legacy 15 SP2 +2 more 1.0.2p-3.34.1
- openssl-1_1 SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +4 more 1.1.1d-2.27.1
- openssl1 SLES 11-SECURITY 1.0.1g-0.58.30.1
suse advisories SUSE-SU-2021:0082-1SUSE-SU-2021:0068-1SUSE-SU-2021:0062-1SUSE-SU-2021:0060-1SUSE-SU-2020:3763-1SUSE-SU-2020:3762-1
- matrix-synapse openSUSE Tumbleweed 1.43.0-1.1
- openssl-1_1 openSUSE Tumbleweed 1.1.1l-1.2
- openssl-3 openSUSE Tumbleweed 3.0.1-1.1
- openssl-1_0_0 openSUSE Tumbleweed 1.0.2u-12.1
- nodejs10 openSUSE Leap 15.1 10.23.1-lp151.2.15.1
- nodejs10 openSUSE Leap 15.2 10.23.1-lp152.2.9.1
- nodejs12 openSUSE Leap 15.2 12.20.1-lp152.3.9.1
- openssl-1_0_0 openSUSE Leap 15.1 1.0.2p-lp151.5.20.1
opensuse advisories openSUSE-SU-2024:11041-1openSUSE-SU-2024:11127-1openSUSE-SU-2024:11797-1openSUSE-SU-2024:12687-1openSUSE-SU-2021:0082-1openSUSE-SU-2021:0065-1
- openssl Alpine 3.24, Alpine 3.23, Alpine 3.22 +13 more 1.1.1i-r0
- libressl Alpine 3.24, Alpine 3.23, Alpine 3.22 +9 more 3.1.5-r0
- openssl3 Alpine 3.16, Alpine 3.15 1.1.1i-r0
- openssl1.1-compat Alpine 3.18, Alpine 3.17 1.1.1i-r0
alpine advisories ALPINE-CVE-2020-1971
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- openssl Arch Linux 1.1.1.i-1
arch linux advisories AVG-1335
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2020-1971 updated cvss 5.9
openssl: EDIPARTYNAME NULL pointer de-reference
-
Red Hat Enterprise Linux 5 opensslaffected: workaround, no fix planned “Out of support scope”
-
Red Hat Enterprise Linux 8 compat-openssl10affected: workaround, no fix planned “Will not fix”
-
Red Hat JBCS 2.4.37 SP6fixed: vendor fix RHSA-2021:0488
-
Red Hat OpenShift Do 1 openshiftdo/odo-init-image-rhel7 1.1.3-2fixed: vendor fix RHSA-2021:0949
-
Red Hat Enterprise Linux BaseOS (v. 8) openssl 1.1.1g-12.el8_3, openssl-libs 1.1.1g-12.el8_3, openssl-perl 1.1.1g-12.el8_3fixed: vendor fix RHSA-2020:5476
-
Red Hat Enterprise Linux BaseOS E4S (v. 8.0) openssl 1.1.1-9.el8_0, openssl-libs 1.1.1-9.el8_0, openssl-perl 1.1.1-9.el8_0fixed: vendor fix RHSA-2020:5588
-
Red Hat Enterprise Linux BaseOS EUS (v. 8.1) openssl 1.1.1c-3.el8_1, openssl-libs 1.1.1c-3.el8_1, openssl-perl 1.1.1c-3.el8_1fixed: vendor fix RHSA-2020:5637
-
Red Hat Enterprise Linux BaseOS EUS (v. 8.2) openssl 1.1.1c-16.el8_2, openssl-libs 1.1.1c-16.el8_2, openssl-perl 1.1.1c-16.el8_2fixed: vendor fix RHSA-2020:5422
show 26 moreshow fewer
-
Red Hat Enterprise Linux Client (v. 7) openssl 1.0.2k-21.el7_9, openssl-libs 1.0.2k-21.el7_9 Red Hat Enterprise Linux Client Optional (v. 7) openssl-perl 1.0.2k-21.el7_9fixed: vendor fix RHSA-2020:5566
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) openssl 1.0.2k-17.el7_6, openssl-libs 1.0.2k-17.el7_6fixed: vendor fix RHSA-2020:5642
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) openssl 1.0.2k-20.el7_7, openssl-libs 1.0.2k-20.el7_7fixed: vendor fix RHSA-2020:5623
-
Red Hat Enterprise Linux ComputeNode Optional (v. 7) openssl-perl 1.0.2k-21.el7_9fixed: vendor fix RHSA-2020:5566
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) openssl-perl 1.0.2k-17.el7_6fixed: vendor fix RHSA-2020:5642
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) openssl-perl 1.0.2k-20.el7_7fixed: vendor fix RHSA-2020:5623
-
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) openssl 1.0.2k-17.el7_6, openssl-libs 1.0.2k-17.el7_6 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) openssl-perl 1.0.2k-17.el7_6fixed: vendor fix RHSA-2020:5642
-
Red Hat Enterprise Linux Server (v. 6 ELS) openssl 1.0.1e-59.el6_10fixed: vendor fix RHSA-2021:0056
-
Red Hat Enterprise Linux Server (v. 7) openssl 1.0.2k-21.el7_9, openssl-libs 1.0.2k-21.el7_9fixed: vendor fix RHSA-2020:5566
-
Red Hat Enterprise Linux Server AUS (v. 7.2) openssl 1.0.1e-52.el7_2, openssl-libs 1.0.1e-52.el7_2fixed: vendor fix RHSA-2020:5639
-
Red Hat Enterprise Linux Server AUS (v. 7.3) openssl 1.0.1e-61.el7_3, openssl-libs 1.0.1e-61.el7_3fixed: vendor fix RHSA-2020:5640
-
Red Hat Enterprise Linux Server AUS (v. 7.4) openssl 1.0.2k-9.el7_4, openssl-libs 1.0.2k-9.el7_4 Red Hat Enterprise Linux Server E4S (v. 7.4) openssl 1.0.2k-9.el7_4, openssl-libs 1.0.2k-9.el7_4fixed: vendor fix RHSA-2020:5641
-
Red Hat Enterprise Linux Server EUS (v. 7.6) openssl 1.0.2k-17.el7_6, openssl-libs 1.0.2k-17.el7_6fixed: vendor fix RHSA-2020:5642
-
Red Hat Enterprise Linux Server EUS (v. 7.7) openssl 1.0.2k-20.el7_7, openssl-libs 1.0.2k-20.el7_7fixed: vendor fix RHSA-2020:5623
-
Red Hat Enterprise Linux Server Optional (v. 6 ELS) openssl-perl 1.0.1e-59.el6_10fixed: vendor fix RHSA-2021:0056
-
Red Hat Enterprise Linux Server Optional (v. 7) openssl-perl 1.0.2k-21.el7_9fixed: vendor fix RHSA-2020:5566
-
Red Hat Enterprise Linux Server Optional AUS (v. 7.2) openssl-perl 1.0.1e-52.el7_2fixed: vendor fix RHSA-2020:5639
-
Red Hat Enterprise Linux Server Optional AUS (v. 7.3) openssl-perl 1.0.1e-61.el7_3fixed: vendor fix RHSA-2020:5640
-
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) openssl-perl 1.0.2k-9.el7_4 Red Hat Enterprise Linux Server Optional E4S (v. 7.4) openssl-perl 1.0.2k-9.el7_4fixed: vendor fix RHSA-2020:5641
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.6) openssl-perl 1.0.2k-17.el7_6fixed: vendor fix RHSA-2020:5642
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.7) openssl-perl 1.0.2k-20.el7_7fixed: vendor fix RHSA-2020:5623
-
Red Hat Enterprise Linux Server Optional TUS (v. 7.4) openssl-perl 1.0.2k-9.el7_4 Red Hat Enterprise Linux Server TUS (v. 7.4) openssl 1.0.2k-9.el7_4, openssl-libs 1.0.2k-9.el7_4fixed: vendor fix RHSA-2020:5641
-
Red Hat Enterprise Linux Workstation (v. 7) openssl 1.0.2k-21.el7_9, openssl-libs 1.0.2k-21.el7_9 Red Hat Enterprise Linux Workstation Optional (v. 7) openssl-perl 1.0.2k-21.el7_9fixed: vendor fix RHSA-2020:5566
-
Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-brotli 1.0.6-40.jbcs.el7, jbcs-httpd24-httpd 2.4.37-66.jbcs.el7, jbcs-httpd24-mod_md 2.0.8-31.jbcs.el7, jbcs-httpd24-openssl 1.1.1g-3.jbcs.el7, jbcs-httpd24-mod_ssl 2.4.37-66.jbcs.el7, jbcs-httpd24-nghttp2 1.39.2-35.jbcs.el7, +16 morefixed: vendor fix RHSA-2021:0486
-
Red Hat JBoss Web Server 3.1fixed: vendor fix RHSA-2021:0491
-
Red Hat JBoss Web Server 3.1 for RHEL 7 tomcat-native 1.2.23-23.redhat_23.ep7.el7fixed: vendor fix RHSA-2021:0489
3 more fixed, 4 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
cisa ICSA-22-069-09 updated cvss 5.9
Siemens SINEC INS
-
Siemens SINEC INS <V1.0.1.1affected: fixed in V1.0.1.1 support.industry.siemens.com
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-24-046-02 updated cvss 5.9
Siemens SIDIS Prime
-
Siemens SIDIS Prime <V4.0.400affected: fixed in V4.0.400
Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf
cisa ICSA-21-336-06 updated cvss 5.9
Hitachi Energy APM Edge
-
Hitachi Energy APM Edge 3.0, 2.0, 1.0affected: vendor fix, mitigation “Physically protect process control systems from direct access by unauthorized personnel.” search.abb.com
From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
6.99% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| CNA | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| OSV | 3.1 | 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | node | >=10.13.0, <10.23.1 >=12.13.0, <12.20.1 >=14.15.0, <14.15.4 >=15.0.0, <15.5.0 |
10.23.1 12.20.1 14.15.4 15.5.0 |
| bitnami | node-min | >=10.0.0, <10.12.1 >=10.13.0, <10.23.1 >=12.0.0, <12.12.1 >=12.13.0, <12.20.1 >=14.15.0, <14.15.4 >=15.0.0, <15.5.0 >=14.0.0, <14.14.1 |
10.12.1 10.23.1 12.12.1 12.20.1 14.15.4 15.5.0 14.14.1 |
| julia | OpenSSL_jll | <1.1.10+0 |
1.1.10+0 |
| julia | Openresty_jll | <1.19.9+0 |
1.19.9+0 |
Affected products
- OpenSSL OpenSSL
Classification
- Weakness
-
- CWE-476 NULL Pointer Dereference
- Technology feeds
References
-
oracle.com
/security-alerts/cpuApr2021.html
patch, third-party-advisory, advisory, web
-
oracle.com
//security-alerts/cpujul2021.html
patch, third-party-advisory, advisory, web
-
oracle.com
/security-alerts/cpuapr2022.html
patch, third-party-advisory, advisory, web
-
debian.org
/security/2020/dsa-4807
vendor-advisory, third-party-advisory, advisory, web
-
security.freebsd.org
/advisories/FreeBSD-SA-20:33.openssl.asc
vendor-advisory, third-party-advisory, advisory, web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/
vendor-advisory, web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/
vendor-advisory, web
-
security.gentoo.org
/glsa/202012-13
vendor-advisory, third-party-advisory, advisory, web
-
openssl.org
/news/secadv/20201208.txt
vendor-advisory, advisory, web
-
git.openssl.org
/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920
web
-
git.openssl.org
/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e
web
-
lists.debian.org
/debian-lts-announce/2020/12/msg00021.html
mailing-list, third-party-advisory, advisory, web
-
lists.debian.org
/debian-lts-announce/2020/12/msg00020.html
mailing-list, third-party-advisory, advisory, web
-
lists.apache.org
/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E
mailing-list, web
-
oracle.com
/security-alerts/cpujan2021.html
third-party-advisory, advisory, web
-
tenable.com
/security/tns-2020-11
third-party-advisory, advisory, web
-
security.netapp.com
/advisory/ntap-20201218-0005/
third-party-advisory, advisory, web
-
kb.pulsesecure.net
/articles/Pulse_Security_Advisories/SA44676
third-party-advisory, advisory, web
-
lists.apache.org
/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E
mailing-list, web
-
tenable.com
/security/tns-2021-10
third-party-advisory, advisory, web
-
tenable.com
/security/tns-2021-09
third-party-advisory, advisory, web
-
security.netapp.com
/advisory/ntap-20210513-0002/
third-party-advisory, advisory, web
-
openwall.com
/lists/oss-security/2021/09/14/2
mailing-list, third-party-advisory, advisory, web
-
oracle.com
/security-alerts/cpuoct2021.html
third-party-advisory, advisory, web
-
cert-portal.siemens.com
/productcert/pdf/ssa-389290.pdf
third-party-advisory, web
-
security.netapp.com
/advisory/ntap-20240621-0006/
web
-
nvd.nist.gov
/vuln/detail/CVE-2020-1971
web
-
git.openssl.org
/gitweb/?p=openssl.git;a=commitdiff;h=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e
web
-
git.openssl.org
/gitweb/?p=openssl.git;a=commitdiff;h=f960d81215ebf3f65e03d4d5d857fb9b666d6920
web
-
github.com
/advisories/GHSA-whf2-mq76-2fhv
web
-
lists.apache.org
/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c@%3Cdev.tomcat.apache.org%3E
web
-
lists.apache.org
/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143@%3Ccommits.pulsar.apache.org%3E
web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU
web
-
lists.fedoraproject.org
/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7
web
-
lists.fedoraproject.org
/archives/list/package-announce@lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU
web
-
lists.fedoraproject.org
/archives/list/package-announce@lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7
web
-
security.netapp.com
/advisory/ntap-20201218-0005
web
-
security.netapp.com
/advisory/ntap-20210513-0002
web
-
security.netapp.com
/advisory/ntap-20240621-0006
web
Sources
- CVE List CVE-2020-1971
- NVD CVE-2020-1971
- OSV BIT-node-2020-1971
- OSV BIT-node-min-2020-1971
- OSV JLSEC-2026-220
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.