GitHub Advisoryadvisory · crates.io

GHSA-6hcf-g6gr-hhcr `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference

HIGH Published 2023-03-24 Modified 2023-03-24 Official page ↗
Ecosystem
crates.io
Packages
openssl
Severity
High
Weaknesses
CWE-476
Reviewed
2023-03-24

Affected packages

• crates.io openssl: >= 0.9.7, < 0.10.48 → fixed in 0.10.48

Description

These functions would crash when the context argument was None with certain extension types. Thanks to David Benjamin (Google) for reporting this issue.

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References