CVE-2018-20997: Use After Free
Published Aug 26, 2019
·Updated
An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing.
Affected Software
1 affected component
Rust-openssl Project Rust-openssl<0.10.9
Event History
Aug 26, 2019
CVE Published
via MITRE·05:12 PM
Data Sourced
via MITRE·05:12 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20997?
CVE-2018-20997 is considered a moderate severity vulnerability due to the potential for use-after-free errors in the OpenSSL crate.
2
How do I fix CVE-2018-20997?
To fix CVE-2018-20997, update the openssl crate to version 0.10.9 or later.
3
What software is affected by CVE-2018-20997?
CVE-2018-20997 affects the openssl crate for Rust versions prior to 0.10.9.
4
What is a use-after-free vulnerability in CVE-2018-20997?
In CVE-2018-20997, a use-after-free vulnerability occurs when a program continues to use a pointer after it has been freed, potentially leading to crashes or security breaches.
5
Who should be concerned about CVE-2018-20997?
Developers using the OpenSSL crate in their Rust applications should be concerned about CVE-2018-20997 and take necessary updates to mitigate the risk.