Description
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | openssl | >= 0.10.8, < 0.10.9 | 0.10.9 | GHSA-xjxc-vfw2-cg96 |
Critical · 9.8
CVE-2018-20997
EUVD-2021-1934GHSA-xjxc-vfw2-cg96RUSTSEC-2018-0010
Use after free in openssl
Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre