CVE-2016-7053

CVE-2016-7053 · CMS Null dereference

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

CVSS 7.5 · Alta · EPSS 21,7% · Corrección disponible

Publicación

2017-05-04T19:00:00.000Z

Actualización

2024-09-16T20:52:38.446Z

Pila tecnológica: system · network

Comprueba tu servidor →