Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence

CVE-2020-1967

High

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension.

Published Apr 21, 2021 · Updated Oct 10, 2026 · Also known as ALPINE-CVE-2020-1967, DEBIAN-CVE-2020-1967, DSA-4661-1, EUVD-2021-1780, GHSA-jq65-29v4-4x35, JLSEC-2026-219, RUSTSEC-2020-0015, SUSE-SU-2020:1058-1, SUSE-SU-2020:2041-1, UBUNTU-CVE-2020-1967

Key Facts

Patch immediately
  • CVE-2020-1967 is a high-severity vulnerability (CVSS 7.5 v3.1) affecting Enterpriseone (Jdedwards), Active Iq Unified Manager (Netapp), E-Series Performance Analyzer (Netapp) and 22 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
  • EPSS estimates a 53% probability of exploitation in the next 30 days.
  • Fixed versions are available, including cargo 1.43.1-12.1, cargo 1.43.1-lp151.5.13.1, cargo 1.43.1-lp152.3.5.1.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (30-day exploit likelihood)

53%

Higher than 98.9% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

None known

Get the full CVE-2020-1967 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).

Affected Products

169 affected entries in total
ProductAffected versionsFixed in
EnterpriseoneJdedwardsSee advisory9.2.5.0
Active Iq Unified ManagerNetappSee advisoryn/a
E-Series Performance AnalyzerNetappSee advisoryn/a
Oncommand InsightNetappSee advisoryn/a
Oncommand Workflow AutomationNetappSee advisoryn/a
20 more affected products in the full CVE brief

Patched Releases

cargo

1.43.1-12.1, 1.43.1-lp151.5.13.1, 1.43.1-lp152.3.5.1, 1.54.0-1.2

cargo-doc

1.43.1-lp151.5.13.1, 1.43.1-lp152.3.5.1

cargo1.53

1.53.0-2.5

cargo1.53-doc

1.53.0-2.5

clippy

1.43.1-12.1, 1.43.1-lp151.5.13.1, 1.43.1-lp152.3.5.1

Enterpriseone

9.2.5.0

lib32-openssl

1.1.1.g-1

libopenssl-1_1-devel

1.1.1d-2.23.1, 1.1.1l-1.2

libopenssl-1_1-devel-32bit

1.1.1d-2.23.1, 1.1.1l-1.2

libopenssl1_1

1.1.1d-2.23.1, 1.1.1l-1.2

libopenssl1_1-32bit

1.1.1d-2.23.1, 1.1.1l-1.2

libopenssl1_1-hmac

1.1.1l-1.2

mysql-8.0

8.0.38-r0

nxtgn-openssl

1.1.1d-3.ph2, 1.1.1d-3.ph3

OpenSSL

1.1.1.g-1, 1.1.1d-0+deb10u3, 1.1.1f-1ubuntu2, 1.1.1g, 1.1.1g-1, 1.1.1g-r0, NA, <=1.1.1f

OpenSSL_jll

1.1.10+0

openssl-1_1

1.1.1d-2.23.1, 1.1.1l-1.2

openssl-1_1-doc

1.1.1l-1.2

openssl-src

111.9.0

openssl1.1-compat

1.1.1g-r0

openssl3

1.1.1g-r0

Mysql

<=5.6.48

Mysql Connectors

<=8.0.20

Mysql Enterprise Monitor

<=4.0.12

Mysql Workbench

<=8.0.21

Timeline

  1. Publicly disclosed

    Apr 21, 2021

  2. Last updated

    Oct 10, 2026

Weakness Type

  • CWE-476 NULL Pointer Dereference

References

15 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2020-1967 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo