The Backend Engineering Show with Hussein Nasser
The Backend Engineering Show with Hussein Nasser
Hussein Nasser
High severity flaw can crash your WebServer when using OpenSSL - Let us discuss
17 minutes Posted Mar 26, 2021 at 7:00 am.
0:00
17:49
Download MP3
Show notes
On Thursday, OpenSSL maintainers released a fix for two high severity vulnerabilities, let us discuss the impact.
OpenSSL two major vulnerabilities
why OpenSSL
Bug 1 - Renegotiating TLS 1.2 (CVE-2021-3449)
Bug 2 - Cert verification bypass (CVE-2021-3450)
Update to OpenSSL 1.1.1k
Resources
https://www.openssl.org/news/vulnerabilities.html
https://arstechnica.com/gadgets/2021/03/openssl-fixes-high-severity-flaw-that-allows-hackers-to-crash-servers/