CVE-2016-7053

CVE-2016-7053 · CMS Null dereference

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

In OpenSSL 1.1.0 before 1.1.0c, applications parsing invalid CMS structures can crash with a NULL pointer dereference. This is caused by a bug in the handling of the ASN.1 CHOICE type in OpenSSL 1.1.0 which can result in a NULL value being passed to the structure callback if an attempt is made to free certain invalid encodings. Only CHOICE structures using a callback which do not handle NULL value are affected.

CVSS 7.5 · Élevée · EPSS 21,7% · Correctif disponible

Publication

2017-05-04T19:00:00.000Z

Mise à jour

2024-09-16T20:52:38.446Z

Pile logicielle: system · network

Vérifiez votre serveur →