~ / search / GHSA-xjxc-vfw2-cg96

GHSA-xjxc-vfw2-cg96

Use after free in openssl

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-20997

Packages

EcosystemPackageAffectedFixed in
crates.io openssl >= 0.10.8, < 0.10.9 0.10.9

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.

References

External links from the advisory. They lead to third-party sites.