{"cve":"CVE-2020-1967","nvd":{"published":"2020-04-21T14:15:11.287","modified":"2026-10-08T21:17:24.923","status":"Modified","description":"Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-476"],"references":["http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00004.html","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00011.html","http://packetstormsecurity.com/files/157527/OpenSSL-signature_algorithms_cert-Denial-Of-Service.html","http://seclists.org/fulldisclosure/2020/May/5","http://www.openwall.com/lists/oss-security/2020/04/22/2"],"products":["broadcom:fabric_operating_system","debian:debian_linux","fedoraproject:fedora","freebsd:freebsd","jdedwards:enterpriseone","netapp:active_iq_unified_manager","netapp:e-series_performance_analyzer","netapp:oncommand_insight","netapp:oncommand_workflow_automation","netapp:smi-s_provider","netapp:snapcenter","netapp:steelstore_cloud_integrated_storage","openssl:openssl","opensuse:leap","oracle:application_server","oracle:enterprise_manager_base_platform","oracle:enterprise_manager_for_storage_management","oracle:enterprise_manager_ops_center","oracle:http_server","oracle:jd_edwards_world_security","oracle:mysql","oracle:mysql_connectors","oracle:mysql_enterprise_monitor","oracle:mysql_workbench","oracle:peoplesoft_enterprise_peopletools","tenable:log_correlation_engine"],"source":"nvd","synced_at":"2026-10-19T21:04:18.695612450+00:00"},"epss":{"cve":"CVE-2020-1967","score":0.53336,"percentile":0.98978,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-jq65-29v4-4x35","url":"https://osv.dev/vulnerability/GHSA-jq65-29v4-4x35","summary":"Null pointer deference in openssl-src ","modified":"2026-09-10T03:49:08.117269297Z","packages":[{"ecosystem":"crates.io","name":"openssl-src","purl":"pkg:cargo/openssl-src","ranges":[">=111.6.0 <111.9.0"],"fixed":["111.9.0"]}]},{"id":"RUSTSEC-2020-0015","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0015","summary":"Crash causing Denial of Service attack","modified":"2024-07-15T22:00:19.808758Z","packages":[{"ecosystem":"crates.io","name":"openssl-src","purl":"pkg:cargo/openssl-src","ranges":[">=111.6.0 <111.9.0"],"fixed":["111.9.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}