> Source: [sk172983](https://support.checkpoint.com/results/sk/sk172983)

# sk172983 - Check Point Response to CVE-2021-3449 - OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message

| Property | Value |
|----------|-------|
| Solution ID | sk172983 |
| Date Created | 2021-04-11 |
| Last Modified | 2025-02-09 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server |
| Versions | R81.10 (EOS), R81 (EOS), R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS) |

## Symptoms

- * OpenSSL published [CVE-2021-3449](https://www.cve.org/CVERecord?id=CVE-2021-3449) for versions OpenSSL 1.1.1.
* This issue can cause a corresponding process to stop working in Gaia OS.

## Solution

**Check Point versions R80.30 and lower are not vulnerable!**

Check Point is vulnerable to OpenSSL CVE-2021-3449 only in these cases:

* Quantum Security Gateway R80.40 or R81, only Gaia Portal and only when there are no other portals enabled (such as Mobile Access Portal, Data Loss Prevention Portal, Identity Awareness Captive Portal, UserCheck Portal, etc.).
* Quantum Security Management (or Endpoint Security Management Server) R80.40 or R81 that should be accessible internally.
* HTTPS Inspection on a Security Gateway R81 after enabling TLS 1.3.

This problem was fixed. The fix is included in:

* **[Check Point R81.10](https://support.checkpoint.com/results/sk/sk170416)**
* [**Jumbo Hotfix Accumulator for R81**](https://support.checkpoint.com/results/sk/sk170114)**starting from Take 25**
* **[Jumbo Hotfix Accumulator for R80.40](https://support.checkpoint.com/results/sk/sk165456) starting from Take 102**

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content