In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

OpenSSL

Affected Versions:

openssl-1.1.0 openssl-1.1.0a openssl-1.1.0b

References

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03744en_us

http://www.securityfocus.com/bid/94244

https://www.openssl.org/news/secadv/20161110.txt

http://www.securitytracker.com/id/1037261

Published: 2017-05-04T19:00:00Z

Last Modified: 2024-09-16T20:52:38.446Z

Copied to clipboard!